An enterprise risk register in Excel that calculates inherent, current and residual risk, plots them on a heat map, and produces a one-page board pack. ISO 31000:2018 throughout.
Most risk spreadsheets record ratings. This one behaves like a register. Inherent is the risk with no controls. Current is the risk you are actually managing today. Residual is the risk after the treatments you have accepted. The register calculates all three, the heat map plots them, and the board pack reports them. Scores and ratings are formulas, lookups are exact-match, current cannot be entered worse than inherent, and the sheets are protected so a stray keystroke cannot kill a formula.
What's inside
- Risk register with a 6×6 corporate risk matrix and control adequacy overlay
- Family-level risk appetite line that flags anything over it
- Bow-tie barrier map (preventive, detective, corrective) attached to each risk
- Treatment plan that rolls cost and completion back to the register and prompts you to set residual scores when treatments close
- Owners, status and next-review dates, with an overdue count
- One-page board pack: how many Extreme, who is over appetite, what is overdue, what was accepted, what it will cost, and the top ten from inherent to current to residual
- Version history, so the register can be audited rather than overwritten
- Every working row references the ISO 31000:2018 clause and the SRMBOK source
It follows the SRMBOK Spreadsheet Style Guide: yellow cells are for typing, light blue cells are formulas, and dropdowns live on one Lookups tab so wording changes in one place. Worked rows are included as a guide; replace them with your own.
Who it is for
Risk and security managers who need a defensible register and board report without a GRC platform, and consultants who need a workbook they can hand to a client. If you need multi-user access, workflow and automated linkages across the whole process, that is what SECTARA is for. For a single assessment or an interim register, this is the tool.
Excel workbook, delivered as a zip. No macros. Single-organization license. This edition replaces NOV24 for existing owners.
Included in the SRMBOK Library at the Complete level. Compare Library plans.
