Risk registers

A risk register is worth having only if something changes because of what is in it.

Most are reviewed quarterly, largely unchanged, with the same entries in the same colours for years. That is not risk management, it is record keeping. The measure of a working register is how many entries moved, closed or were escalated since the last review.