What is a Risk Register? A risk register is the working record of the risks an organization has identified, assessed, assigned, and decided how to treat. NIST defines a...