RISK REGISTER
tasleemat asset PMO-04.08.02 template --lang en
Deliverable Summary & Governance Boundaries
Lifecycle Phase Alignment
Phase 04: Planning
Sizing Tier Requirements
Tier 1 Tier 2 Tier 3
Validation Contract
This deliverable conforms to a strict companion Draft 2020-12 JSON Schema for automated structural and semantic validation.
tasleemat validate PMO-04.08.02 ./completed_data.json
Template Markdown (Bilingual)
<!-- LLM INSTRUCTIONS: Fill in the [ Add details... ] placeholders based on project context.
Section Instructions:
- Identified Risk Details: Provide comprehensive project data for all required fields in this section.
- Risk Analysis and Exposure Rating: Provide comprehensive project data for all required fields in this section.
- Planned Risk Response and Owner: Provide comprehensive project data for all required fields in this section.
-->
<h3 align="right">{{Company_Name}}</h3>
<h2 align="right">{{Project_Name}} - {{Project_ID}}</h2>
<h1 align="center">RISK REGISTER</h1>
| **Date Prepared:** {{Current_Date}} | **Project Manager:** {{Project_Manager_Name}} | **Prepared By:** {{Prepared_By}} |
| :--- | :--- | :--- |
---
## 1. Identified Risk Details
**Risk Identifier and Category:**
[ Add details... ]
**Risk Event Narrative and Root Cause:**
[ Add details... ]
**Risk Trigger and Symptoms:**
[ Add details... ]
---
## 2. Risk Analysis and Exposure Rating
**Assessed Probability and Impact Scores:**
[ Add details... ]
**Calculated Risk Exposure Rating:**
[ Add details... ]
---
## 3. Planned Risk Response and Owner
**Risk Response Strategy:**
[ Add details... ]
**Action Plan and Contingency Plan:**
[ Add details... ]
**Assigned Risk Owner and Status:**
[ Add details... ]
---
### Sign-off and Approvals
| Role | Name | Signature | Date |
| :--- | :--- | :---: | :---: |
| **Risk Manager / Officer** | {{Risk_Manager_Name}} | _______________________ | [ .... - .... - .... ] |
| **Project Manager** | {{Project_Manager_Name}} | _______________________ | [ .... - .... - .... ] |
| **PMO Lead** | {{PMO_Lead_Name}} | _______________________ | [ .... - .... - .... ] |
---
<div align="right" style="margin-top: 20px; font-size: 12px; color: #7f8c8d;">
<span>Electronic Audit Trail: Hash SHA256: {{Audit_Trail_SHA256_Hash}}</span> <br>
<strong>Template:</strong> RISK REGISTER | <strong>Ref:</strong> PMO-04.08.02 <br>
<i>Generated on: {{Current_Timestamp}}, by <a href="https://github.com/fakhruldeen/Tasleemat/" style="color: #7f8c8d;">Tasleemat</a></i>
</div>
User Guide & Practitioner Instructions
Tasleemat Forms Guide
Project Artifact: Risk Register
Document Reference: PMO-04.08.02
This document provides a comprehensive, professional reference to understand the purpose and effective usage of the Risk Register in alignment with the Tasleemat framework.
1. What?
A master log recording risk IDs, descriptions, triggers, probabilities, impacts, exposure, and response actions.
2. Why?
Provides a single source of truth for managing uncertainties and tracking mitigation actions across the project.
3. When?
Initiated in planning and continuously updated throughout project execution and closing.
4. Who?
Maintained by Risk Manager and Project Manager, actions executed by Risk Owners.
Tailoring Tips
- Integrate as a prioritized risk backlog within agile standups and sprint planning.
- Include quantitative monetary impact valuations for formal commercial contracts.
Alignment & Dependencies
1. Pre-requisites & Inputs (Upstream Dependencies)
- Mandatory:
- Project Charter (PMO-03.01)
- Assumption Log (PMO-03.03)
- Project Baselines (Scope/Schedule/Cost)
- Optional / Contextual:
- AI Governance Plan (PMO-02.02)
- Procurement Strategy (PMO-04.09.02)
2. Downstream Dependents
- Mandatory:
- Risk Register (PMO-04.08.02)
- Risk Reports (PMO-04.08.06)
- Risk Audits (PMO-06.06)
- Optional / Contextual:
- Risk Mitigation Action Plan (PMO-04.08.07)
- Decision Log (PMO-05.02)
5. How?
To accurately and professionally complete the Risk Register, the responsible party
must populate the following critical sections based on the project context (ensure parameters.md is referenced for global project variables):
- Risk Identifier and Category: Unique risk tracking code (e.g., RSK-01) and assigned RBS category.
- Risk Event Narrative and Root Cause: Clear risk statement describing event cause, uncertain occurrence, and potential outcome.
- Risk Trigger and Symptoms: Observable early warning signs and conditions indicating risk materialization.
- Assessed Probability and Impact Scores: Quantitative probability rating and multidimensional impact score.
- Calculated Risk Exposure Rating: Composite risk severity score (Probability x Impact) and overall priority ranking.
- Risk Response Strategy: Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).
- Action Plan and Contingency Plan: Specific preventive mitigation steps and secondary fallback contingency plan.
- Assigned Risk Owner and Status: Designated individual accountable for managing the risk and current lifecycle status.
6. Reference Example
A fully completed, gold-standard reference example illustrating this artifact in practice is available:
๐ Completed Example: 04_08_02_Risk_Register_Example.md
LLM Generation Prompt & Agent Instructions
Risk Register - Generation Prompt
System Instructions: This document contains instructions for generating the ยซRisk Registerยป. When asked to fill this template, follow the section-by-section instructions below. Refer to
parameters.mdfor project variables.Context and Definition: A central project repository capturing identified individual project risks, analysis results, response strategies, and assigned risk owners.
Alignment & Dependencies: * Pre-requisites (Inputs): * Mandatory: Project Charter (PMO-03.01), Assumption Log (PMO-03.03), Project Baselines (Scope/Schedule/Cost) * Optional: AI Governance Plan (PMO-02.02), Procurement Strategy (PMO-04.09.02) * Downstream Dependents: * Mandatory: Risk Register (PMO-04.08.02), Risk Reports (PMO-04.08.06), Risk Audits (PMO-06.06) * Optional: Risk Mitigation Action Plan (PMO-04.08.07), Decision Log (PMO-05.02)
Identified Risk Details
Risk Identifier and Category
Instruction: Unique risk tracking code (e.g., RSK-01) and assigned RBS category.
Generated Value: [ Add details... ]
Risk Event Narrative and Root Cause
Instruction: Clear risk statement describing event cause, uncertain occurrence, and potential outcome.
Generated Value: [ Add details... ]
Risk Trigger and Symptoms
Instruction: Observable early warning signs and conditions indicating risk materialization.
Generated Value: [ Add details... ]
Risk Analysis and Exposure Rating
Assessed Probability and Impact Scores
Instruction: Quantitative probability rating and multidimensional impact score.
Generated Value: [ Add details... ]
Calculated Risk Exposure Rating
Instruction: Composite risk severity score (Probability x Impact) and overall priority ranking.
Generated Value: [ Add details... ]
Planned Risk Response and Owner
Risk Response Strategy
Instruction: Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).
Generated Value: [ Add details... ]
Action Plan and Contingency Plan
Instruction: Specific preventive mitigation steps and secondary fallback contingency plan.
Generated Value: [ Add details... ]
Assigned Risk Owner and Status
Instruction: Designated individual accountable for managing the risk and current lifecycle status.
Generated Value: [ Add details... ]
Risk Register (Reference Example)
๐ Gold Standard Reference Example: This document illustrates a fully completed, production-grade artifact adhering to the Tasleemat PMO Framework (
PMO-04.08). All company names, project references, and figures are realistic fictional simulations.
Apex Global Solutions
Apex Unified Cloud ERP & Supply Chain Modernization - PRJ-2026-ERP-01
RISK REGISTER
1. Identified Risk Details
Risk Identifier and Category: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Risk Event Narrative and Root Cause: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Risk Trigger and Symptoms: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
2. Risk Analysis and Exposure Rating
Assessed Probability and Impact Scores: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Calculated Risk Exposure Rating: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
3. Planned Risk Response and Owner
Risk Response Strategy: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Action Plan and Contingency Plan: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Assigned Risk Owner and Status: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.
Sign-off and Approvals
| Role | Name | Signature | Date |
|---|---|---|---|
| Risk Manager / Officer | Layla Al-Omari, PMI-RMP | [Electronically Signed] | 2026-03-18 |
| Project Manager | Faisal Al-Harbi, PMP | [Electronically Signed] | 2026-03-18 |
| PMO Lead | Tariq Al-Mansoor, PfMP | [Electronically Signed] | 2026-03-18 |
| --- |
Generated on: 2026-03-15 10:00 UTC, by Tasleemat
Draft 2020-12 JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://tasleemat.pmo/schemas/completed/PMO-04.08.02.schema.json",
"title": "Completed Risk Register Data Contract",
"description": "Additive structural schema validating completed Risk Register artifact data payloads (PMO-04.08.02).",
"type": "object",
"properties": {
"artifact_id": {
"type": "string",
"const": "PMO-04.08.02"
},
"metadata": {
"type": "object",
"properties": {
"project_name": {
"type": "string",
"minLength": 1
},
"project_code": {
"type": "string"
},
"last_updated": {
"type": "string"
},
"risk_manager": {
"type": "string"
},
"version": {
"type": "string"
}
},
"required": [
"project_name",
"project_code",
"last_updated"
]
},
"risks": {
"type": "array",
"items": {
"type": "object",
"properties": {
"risk_id": {
"type": "string",
"pattern": "^RSK-\\d+"
},
"category": {
"type": "string",
"enum": [
"Technical",
"Schedule",
"Cost",
"Resource",
"External",
"Governance",
"Other"
]
},
"event_narrative": {
"type": "string",
"minLength": 5
},
"root_cause": {
"type": "string"
},
"trigger_symptoms": {
"type": "string"
},
"probability_score": {
"type": "integer",
"minimum": 1,
"maximum": 5
},
"impact_score": {
"type": "integer",
"minimum": 1,
"maximum": 5
},
"exposure_rating": {
"type": "integer",
"minimum": 1,
"maximum": 25
},
"response_strategy": {
"type": "string",
"enum": [
"Avoid",
"Mitigate",
"Transfer",
"Accept",
"Escalate"
]
},
"action_plan": {
"type": "string"
},
"owner": {
"type": "string",
"minLength": 1
},
"status": {
"type": "string",
"enum": [
"Identified",
"Assessing",
"Mitigating",
"Closed",
"Realized"
]
}
},
"required": [
"risk_id",
"category",
"event_narrative",
"probability_score",
"impact_score",
"response_strategy",
"owner",
"status"
]
},
"minItems": 1
}
},
"required": [
"artifact_id",
"metadata",
"risks"
]
}
๐ Form Field Definitions Dictionary (Legacy Specification)
{
"form_name": "RISK REGISTER",
"document_reference": "PMO-04.08.02",
"_llm_instructions": "Populate the fields of 'RISK REGISTER' and write the value of each field under 'Generated Value', based on the project context. Context: the project carrying reference PMO-04.08.02.",
"project_title": "",
"date_prepared": "",
"fields": {
"f01_Risk_Identifier_and_Category": {
"section": "Identified Risk Details",
"label": "Risk Identifier and Category",
"guidance": "Unique risk tracking code (e.g., RSK-01) and assigned RBS category.",
"value": ""
},
"f02_Risk_Event_Narrative_and_Root_Cause": {
"section": "Identified Risk Details",
"label": "Risk Event Narrative and Root Cause",
"guidance": "Clear risk statement describing event cause, uncertain occurrence, and potential outcome.",
"value": ""
},
"f03_Risk_Trigger_and_Symptoms": {
"section": "Identified Risk Details",
"label": "Risk Trigger and Symptoms",
"guidance": "Observable early warning signs and conditions indicating risk materialization.",
"value": ""
},
"f04_Assessed_Probability_and_Impact_Scores": {
"section": "Risk Analysis and Exposure Rating",
"label": "Assessed Probability and Impact Scores",
"guidance": "Quantitative probability rating and multidimensional impact score.",
"value": ""
},
"f05_Calculated_Risk_Exposure_Rating": {
"section": "Risk Analysis and Exposure Rating",
"label": "Calculated Risk Exposure Rating",
"guidance": "Composite risk severity score (Probability x Impact) and overall priority ranking.",
"value": ""
},
"f06_Risk_Response_Strategy": {
"section": "Planned Risk Response and Owner",
"label": "Risk Response Strategy",
"guidance": "Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).",
"value": ""
},
"f07_Action_Plan_and_Contingency_Plan": {
"section": "Planned Risk Response and Owner",
"label": "Action Plan and Contingency Plan",
"guidance": "Specific preventive mitigation steps and secondary fallback contingency plan.",
"value": ""
},
"f08_Assigned_Risk_Owner_and_Status": {
"section": "Planned Risk Response and Owner",
"label": "Assigned Risk Owner and Status",
"guidance": "Designated individual accountable for managing the risk and current lifecycle status.",
"value": ""
}
}
}