Risk register

Core artefact of any risk-based management system. Typical columns: risk description, category, likelihood, consequence, risk score, controls, residual score, owner, review date. Periodic review — usually quarterly — keeps it live.