PMO-04.08.02 Phase 04: Planning
Tier 1 Tier 2 Tier 3 agile ai general hybrid predictive

RISK REGISTER

ุณุฌู„ ุงู„ู…ุฎุงุทุฑ
tasleemat asset PMO-04.08.02 template --lang en

Deliverable Summary & Governance Boundaries

Lifecycle Phase Alignment

Phase 04: Planning

Sizing Tier Requirements

Tier 1 Tier 2 Tier 3

Validation Contract

This deliverable conforms to a strict companion Draft 2020-12 JSON Schema for automated structural and semantic validation.

tasleemat validate PMO-04.08.02 ./completed_data.json

Template Markdown (Bilingual)

<!-- LLM INSTRUCTIONS: Fill in the [ Add details... ] placeholders based on project context.

Section Instructions:
- Identified Risk Details: Provide comprehensive project data for all required fields in this section.
- Risk Analysis and Exposure Rating: Provide comprehensive project data for all required fields in this section.
- Planned Risk Response and Owner: Provide comprehensive project data for all required fields in this section.
-->

<h3 align="right">{{Company_Name}}</h3>
<h2 align="right">{{Project_Name}} - {{Project_ID}}</h2>
<h1 align="center">RISK REGISTER</h1>

| **Date Prepared:** {{Current_Date}} | **Project Manager:** {{Project_Manager_Name}} | **Prepared By:** {{Prepared_By}} |
| :--- | :--- | :--- |

---

## 1. Identified Risk Details

**Risk Identifier and Category:**
[ Add details... ]

**Risk Event Narrative and Root Cause:**
[ Add details... ]

**Risk Trigger and Symptoms:**
[ Add details... ]

---

## 2. Risk Analysis and Exposure Rating

**Assessed Probability and Impact Scores:**
[ Add details... ]

**Calculated Risk Exposure Rating:**
[ Add details... ]

---

## 3. Planned Risk Response and Owner

**Risk Response Strategy:**
[ Add details... ]

**Action Plan and Contingency Plan:**
[ Add details... ]

**Assigned Risk Owner and Status:**
[ Add details... ]

---

### Sign-off and Approvals

| Role | Name | Signature | Date |
| :--- | :--- | :---: | :---: |
| **Risk Manager / Officer** | {{Risk_Manager_Name}} | _______________________ | [ .... - .... - .... ] |
| **Project Manager** | {{Project_Manager_Name}} | _______________________ | [ .... - .... - .... ] |
| **PMO Lead** | {{PMO_Lead_Name}} | _______________________ | [ .... - .... - .... ] |
---

<div align="right" style="margin-top: 20px; font-size: 12px; color: #7f8c8d;">
  <span>Electronic Audit Trail: Hash SHA256: {{Audit_Trail_SHA256_Hash}}</span> <br>
  <strong>Template:</strong> RISK REGISTER | <strong>Ref:</strong> PMO-04.08.02 <br>
  <i>Generated on: {{Current_Timestamp}}, by <a href="https://github.com/fakhruldeen/Tasleemat/" style="color: #7f8c8d;">Tasleemat</a></i>
</div>

User Guide & Practitioner Instructions

Tasleemat Forms Guide

Project Artifact: Risk Register

Document Reference: PMO-04.08.02

This document provides a comprehensive, professional reference to understand the purpose and effective usage of the Risk Register in alignment with the Tasleemat framework.


1. What?

A master log recording risk IDs, descriptions, triggers, probabilities, impacts, exposure, and response actions.


2. Why?

Provides a single source of truth for managing uncertainties and tracking mitigation actions across the project.


3. When?

Initiated in planning and continuously updated throughout project execution and closing.


4. Who?

Maintained by Risk Manager and Project Manager, actions executed by Risk Owners.


Tailoring Tips

  • Integrate as a prioritized risk backlog within agile standups and sprint planning.
  • Include quantitative monetary impact valuations for formal commercial contracts.

Alignment & Dependencies

1. Pre-requisites & Inputs (Upstream Dependencies)

  • Mandatory:
    • Project Charter (PMO-03.01)
    • Assumption Log (PMO-03.03)
    • Project Baselines (Scope/Schedule/Cost)
  • Optional / Contextual:
    • AI Governance Plan (PMO-02.02)
    • Procurement Strategy (PMO-04.09.02)

2. Downstream Dependents

  • Mandatory:
    • Risk Register (PMO-04.08.02)
    • Risk Reports (PMO-04.08.06)
    • Risk Audits (PMO-06.06)
  • Optional / Contextual:
    • Risk Mitigation Action Plan (PMO-04.08.07)
    • Decision Log (PMO-05.02)

5. How?

To accurately and professionally complete the Risk Register, the responsible party must populate the following critical sections based on the project context (ensure parameters.md is referenced for global project variables):

  • Risk Identifier and Category: Unique risk tracking code (e.g., RSK-01) and assigned RBS category.
  • Risk Event Narrative and Root Cause: Clear risk statement describing event cause, uncertain occurrence, and potential outcome.
  • Risk Trigger and Symptoms: Observable early warning signs and conditions indicating risk materialization.
  • Assessed Probability and Impact Scores: Quantitative probability rating and multidimensional impact score.
  • Calculated Risk Exposure Rating: Composite risk severity score (Probability x Impact) and overall priority ranking.
  • Risk Response Strategy: Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).
  • Action Plan and Contingency Plan: Specific preventive mitigation steps and secondary fallback contingency plan.
  • Assigned Risk Owner and Status: Designated individual accountable for managing the risk and current lifecycle status.

6. Reference Example

A fully completed, gold-standard reference example illustrating this artifact in practice is available:

๐Ÿ“– Completed Example: 04_08_02_Risk_Register_Example.md

LLM Generation Prompt & Agent Instructions

Risk Register - Generation Prompt

System Instructions: This document contains instructions for generating the ยซRisk Registerยป. When asked to fill this template, follow the section-by-section instructions below. Refer to parameters.md for project variables.

Context and Definition: A central project repository capturing identified individual project risks, analysis results, response strategies, and assigned risk owners.

Alignment & Dependencies: * Pre-requisites (Inputs): * Mandatory: Project Charter (PMO-03.01), Assumption Log (PMO-03.03), Project Baselines (Scope/Schedule/Cost) * Optional: AI Governance Plan (PMO-02.02), Procurement Strategy (PMO-04.09.02) * Downstream Dependents: * Mandatory: Risk Register (PMO-04.08.02), Risk Reports (PMO-04.08.06), Risk Audits (PMO-06.06) * Optional: Risk Mitigation Action Plan (PMO-04.08.07), Decision Log (PMO-05.02)


Identified Risk Details

Risk Identifier and Category

Instruction: Unique risk tracking code (e.g., RSK-01) and assigned RBS category.

Generated Value: [ Add details... ]

Risk Event Narrative and Root Cause

Instruction: Clear risk statement describing event cause, uncertain occurrence, and potential outcome.

Generated Value: [ Add details... ]

Risk Trigger and Symptoms

Instruction: Observable early warning signs and conditions indicating risk materialization.

Generated Value: [ Add details... ]

Risk Analysis and Exposure Rating

Assessed Probability and Impact Scores

Instruction: Quantitative probability rating and multidimensional impact score.

Generated Value: [ Add details... ]

Calculated Risk Exposure Rating

Instruction: Composite risk severity score (Probability x Impact) and overall priority ranking.

Generated Value: [ Add details... ]

Planned Risk Response and Owner

Risk Response Strategy

Instruction: Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).

Generated Value: [ Add details... ]

Action Plan and Contingency Plan

Instruction: Specific preventive mitigation steps and secondary fallback contingency plan.

Generated Value: [ Add details... ]

Assigned Risk Owner and Status

Instruction: Designated individual accountable for managing the risk and current lifecycle status.

Generated Value: [ Add details... ]


PMO-04.08.02 Phase 04: Planning Realistic Case Study Benchmark
Date Prepared
2026-03-15
Project Manager
Faisal Al-Harbi, PMP
Prepared By
Faisal Al-Harbi, PMP (Senior Project Manager)

Risk Register (Reference Example)

๐Ÿ† Gold Standard Reference Example: This document illustrates a fully completed, production-grade artifact adhering to the Tasleemat PMO Framework (PMO-04.08). All company names, project references, and figures are realistic fictional simulations.


Apex Global Solutions

Apex Unified Cloud ERP & Supply Chain Modernization - PRJ-2026-ERP-01

RISK REGISTER


1. Identified Risk Details

Risk Identifier and Category: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.

Risk Event Narrative and Root Cause: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.

Risk Trigger and Symptoms: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.


2. Risk Analysis and Exposure Rating

Assessed Probability and Impact Scores: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.

Calculated Risk Exposure Rating: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.


3. Planned Risk Response and Owner

Risk Response Strategy: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.

Action Plan and Contingency Plan: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.

Assigned Risk Owner and Status: Overall Project Risk Assessment: Overall risk is classified as 'Moderate-High' due to multi-system integration complexity and cross-departmental change impact. Key mitigation actions include dedicated middleware squads, a phased regional rollout strategy (Pilot first), a 10% contingency management reserve, and active weekly risk reviews with the executive steering board.


Sign-off and Approvals

Role Name Signature Date
Risk Manager / Officer Layla Al-Omari, PMI-RMP [Electronically Signed] 2026-03-18
Project Manager Faisal Al-Harbi, PMP [Electronically Signed] 2026-03-18
PMO Lead Tariq Al-Mansoor, PfMP [Electronically Signed] 2026-03-18
---
Template: RISK REGISTER | Ref: PMO-04.08.02
Generated on: 2026-03-15 10:00 UTC, by Tasleemat

Draft 2020-12 JSON Schema

Canonical machine-readable data contract for automated payload validation with tasleemat CLI.
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://tasleemat.pmo/schemas/completed/PMO-04.08.02.schema.json",
  "title": "Completed Risk Register Data Contract",
  "description": "Additive structural schema validating completed Risk Register artifact data payloads (PMO-04.08.02).",
  "type": "object",
  "properties": {
    "artifact_id": {
      "type": "string",
      "const": "PMO-04.08.02"
    },
    "metadata": {
      "type": "object",
      "properties": {
        "project_name": {
          "type": "string",
          "minLength": 1
        },
        "project_code": {
          "type": "string"
        },
        "last_updated": {
          "type": "string"
        },
        "risk_manager": {
          "type": "string"
        },
        "version": {
          "type": "string"
        }
      },
      "required": [
        "project_name",
        "project_code",
        "last_updated"
      ]
    },
    "risks": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "risk_id": {
            "type": "string",
            "pattern": "^RSK-\\d+"
          },
          "category": {
            "type": "string",
            "enum": [
              "Technical",
              "Schedule",
              "Cost",
              "Resource",
              "External",
              "Governance",
              "Other"
            ]
          },
          "event_narrative": {
            "type": "string",
            "minLength": 5
          },
          "root_cause": {
            "type": "string"
          },
          "trigger_symptoms": {
            "type": "string"
          },
          "probability_score": {
            "type": "integer",
            "minimum": 1,
            "maximum": 5
          },
          "impact_score": {
            "type": "integer",
            "minimum": 1,
            "maximum": 5
          },
          "exposure_rating": {
            "type": "integer",
            "minimum": 1,
            "maximum": 25
          },
          "response_strategy": {
            "type": "string",
            "enum": [
              "Avoid",
              "Mitigate",
              "Transfer",
              "Accept",
              "Escalate"
            ]
          },
          "action_plan": {
            "type": "string"
          },
          "owner": {
            "type": "string",
            "minLength": 1
          },
          "status": {
            "type": "string",
            "enum": [
              "Identified",
              "Assessing",
              "Mitigating",
              "Closed",
              "Realized"
            ]
          }
        },
        "required": [
          "risk_id",
          "category",
          "event_narrative",
          "probability_score",
          "impact_score",
          "response_strategy",
          "owner",
          "status"
        ]
      },
      "minItems": 1
    }
  },
  "required": [
    "artifact_id",
    "metadata",
    "risks"
  ]
}
๐Ÿ“‹ Form Field Definitions Dictionary (Legacy Specification)
{
  "form_name": "RISK REGISTER",
  "document_reference": "PMO-04.08.02",
  "_llm_instructions": "Populate the fields of 'RISK REGISTER' and write the value of each field under 'Generated Value', based on the project context. Context: the project carrying reference PMO-04.08.02.",
  "project_title": "",
  "date_prepared": "",
  "fields": {
    "f01_Risk_Identifier_and_Category": {
      "section": "Identified Risk Details",
      "label": "Risk Identifier and Category",
      "guidance": "Unique risk tracking code (e.g., RSK-01) and assigned RBS category.",
      "value": ""
    },
    "f02_Risk_Event_Narrative_and_Root_Cause": {
      "section": "Identified Risk Details",
      "label": "Risk Event Narrative and Root Cause",
      "guidance": "Clear risk statement describing event cause, uncertain occurrence, and potential outcome.",
      "value": ""
    },
    "f03_Risk_Trigger_and_Symptoms": {
      "section": "Identified Risk Details",
      "label": "Risk Trigger and Symptoms",
      "guidance": "Observable early warning signs and conditions indicating risk materialization.",
      "value": ""
    },
    "f04_Assessed_Probability_and_Impact_Scores": {
      "section": "Risk Analysis and Exposure Rating",
      "label": "Assessed Probability and Impact Scores",
      "guidance": "Quantitative probability rating and multidimensional impact score.",
      "value": ""
    },
    "f05_Calculated_Risk_Exposure_Rating": {
      "section": "Risk Analysis and Exposure Rating",
      "label": "Calculated Risk Exposure Rating",
      "guidance": "Composite risk severity score (Probability x Impact) and overall priority ranking.",
      "value": ""
    },
    "f06_Risk_Response_Strategy": {
      "section": "Planned Risk Response and Owner",
      "label": "Risk Response Strategy",
      "guidance": "Selected treatment strategy (Avoid, Mitigate, Transfer, Accept, Exploit, Enhance, Share).",
      "value": ""
    },
    "f07_Action_Plan_and_Contingency_Plan": {
      "section": "Planned Risk Response and Owner",
      "label": "Action Plan and Contingency Plan",
      "guidance": "Specific preventive mitigation steps and secondary fallback contingency plan.",
      "value": ""
    },
    "f08_Assigned_Risk_Owner_and_Status": {
      "section": "Planned Risk Response and Owner",
      "label": "Assigned Risk Owner and Status",
      "guidance": "Designated individual accountable for managing the risk and current lifecycle status.",
      "value": ""
    }
  }
}