ISO RISK AND OPPORTUNITIES REGISTER TEMPLATE
What controls already
RISK IMPACT IMPACT PROBABILITY PRIORITY RISK MITIGATION OR
RISK DESCRIPTION PROCESS ISO 27001 exist that can address the OPPORTUNITIES OWNER
ID NO. DESCRIPTION LEVEL LEVEL LEVEL ELIMINATED? CONTROL STRATEGY
risk?
Which of the 14 ISO 27001 (IMPACT X Can the following step in
Rate Rate If the risk will be eliminated or What can be done to lower or What opportunities does the
Give a brief summary of the Which process is this risk a Information Security What will happen if the risk is PROBABILITY) the process eliminate the
1 (LOW) to 1 (LOW) to mitigated by existing processes, eliminate the impact or potential or existing risk offer Who's responsible?
risk. part of? Standards steps does this cyber not mitigated or eliminated? Address the highest risk?
5 (HIGH) 5 (HIGH) list them here. probability? us?
security risk relate to? first. YES or NO
1.1 1 1 1 YES
1.2 2 2 4 NO
3 3 9
4 4 16
5 5 25
ISO RISK AND OPPORTUNITIES REGISTER TEMPLATE
What controls already
RISK IMPACT IMPACT PROBABILITY PRIORITY RISK MITIGATION OR
RISK DESCRIPTION PROCESS ISO 27001 exist that can address the OPPORTUNITIES OWNER
ID NO. DESCRIPTION LEVEL LEVEL LEVEL ELIMINATED? CONTROL STRATEGY
risk?
Which of the 14 ISO 27001 (IMPACT X Can the following step in
Rate Rate If the risk will be eliminated or What can be done to lower or What opportunities does the
Give a brief summary of the Which process is this risk a Information Security What will happen if the risk is PROBABILITY) the process eliminate the
1 (LOW) to 1 (LOW) to mitigated by existing processes, eliminate the impact or potential or existing risk offer Who's responsible?
risk. part of? Standards steps does this cyber not mitigated or eliminated? Address the highest risk?
5 (HIGH) 5 (HIGH) list them here. probability? us?
security risk relate to? first. YES or NO
RISK REGISTER SCALE KEYS
5 5 10 15 20 25 LEVEL YES or NO
PROBABILITY
4 4 8 12 16 20 1 YES
3 3 6 9 12 15 2 NO
2 2 4 6 8 10 3
1 1 2 3 4 5 4
1 2 3 4 5 5
IMPACT
Any articles, templates, or information provided by Smartsheet on the website are for reference
only. While we strive to keep the information up to date and correct, we make no representations
or warranties of any kind, express or implied, about the completeness, accuracy, reliability,
suitability, or availability with respect to the website or the information, articles, templates, or
related graphics contained on the website. Any reliance you place on such information is
therefore strictly at your own risk.
