Which elements are commonly documented in a risk register?

• A. Project milestones and budgets.
• B. Marketing materials.
• C. Risks, ownership, likelihood, impact, controls, and remediation status.
• D. Employee performance evaluations.

Answer: (C)

A risk register is a living document that records identified risks and how they are being managed. The elements documented here typically include the risk itself, who owns it, the likelihood of occurrence, the potential impact, the controls in place to reduce risk, and the current remediation or mitigation status. This combination lets teams prioritize risks, assign accountability, and track progress over time, so stakeholders can see where attention is needed and whether mitigation efforts are working.

Milestones and budgets focus on project scheduling and cost, not on the ongoing management of risk. Marketing materials aren’t part of risk management documentation, and employee performance evaluations relate to people performance rather than identifying and addressing risks.