Which items are typically recorded in a risk register?

• A. Identified risks, owners, assessments, controls, and actions.
• B. Project budgets, vendor invoices, and timelines.
• C. Marketing campaigns and customer feedback.
• D. Employee personal data and payroll.

Answer: (A)

Risk registers are used to capture what could derail objectives and to drive how those risks are managed. The essential items to record are the identified risks, the owner responsible for each risk, the assessment of the risk (likelihood and impact), the existing controls in place, and the actions planned to address or mitigate the risk. This combination lets you see who is accountable, how serious each risk is, what safeguards already exist, and what steps are next. Other options describe financial records, schedules, or outputs of business activity rather than the key elements that show a risk and how it will be managed, so they don’t fit as the typical contents of a risk register.