Free Risk Register Template (Excel)

What Is a Risk Register (and Why Teams Still Use Excel)

A risk register is a running log of everything that could go wrong on a project, updated throughout its life rather than filled in once and forgotten. Each row is one risk: what it is, who owns it, how likely it is, how bad the impact would be, and what you're doing about it.

Government project offices and PMOs still hand out blank Excel risk registers because the format is simple to fill in during a status meeting and easy to file alongside other project documents. The trade-off is that most of those blank versions leave the scoring to you - you write down a probability and an impact, but nothing turns those numbers into a priority.

This template keeps the same familiar row-per-risk layout but adds the arithmetic: enter probability and impact, and the score and priority label appear next to it, so the register also works as a live prioritization tool, not just a record.

Inside the Free Risk Register Template: Fields and Formulas

Each row covers one risk: a Risk ID, a free-text description, a category picked from a dropdown (Scope, Schedule, Budget, Technical, Resource, External, Quality, Other), an owner, and a probability and impact rating from 1 to 5.

Next to those come the two computed columns - risk score and priority - followed by a mitigation plan field, a status dropdown (Open, Mitigated, Closed), and a next review date. Color highlighting flags Open risks so they stand out while you're scanning the list, and Closed risks are marked separately.

A summary block above the table counts open, mitigated, and closed risks, plus how many risks currently sit in the High priority band - a quick read on where the project stands without scrolling the full list.

How the Auto-Scored Risk Priority Works

The risk score is simply probability multiplied by impact, both rated 1 to 5, so scores range from 1 to 25. The template applies that formula the moment you fill in both ratings for a row - there's nothing to copy down or recalculate.

Priority is a threshold read on that score: 15 or higher is High, 8 to 14 is Medium, and anything below 8 is Low. It's a standard probability-times-impact matrix condensed into one column instead of a separate grid, so you get the label right where you're already logging the risk.

Because it's a straightforward numeric threshold, you can see instantly which risks deserve attention first without a separate risk matrix chart or manual sorting.

Tracking Risk Status and Review Dates

Each risk carries a Status of Open, Mitigated, or Closed, plus a Next Review date so you know when to revisit it. The summary counts update automatically as you change statuses, giving you a running total instead of having to recount rows manually.

This is where the register earns its keep as a living document rather than a one-time exercise: risks get added as new ones surface, statuses move from Open to Mitigated to Closed as work happens, and the priority recalculates on its own if probability or impact changes.