Risk Treatment Plan

What you decide for each risk, the actions that follow and who signs off.

Includes: Risk heatmap (likelihood × impact)

For each risk above your threshold, in any part of your business, three treatments written for your company: you accept them or add your own. Each risk gets its action, owner, due date and the level expected once treated. Nothing is decided for the risk owner.

Columns of the register

RiskScoreLevelTreatmentActionProposed treatmentsOwnerDue dateTarget residual riskRisk owner approval

1
Decision
Three proposed treatments per risk: you accept them or add your own.
2
Action plan
Action, owner and due date.
3
Residual risk
Target residual risk and the risk owner's approval.

What you provide

Deliverable — Its title, its author and its structure are yours: they steer what is written.
The risks to treat — From a risk register you select above, or listed here.
Threshold, deadlines and owners — They decide which risks enter the plan and when each treatment is due.