Risk register gives you a living register instead of a spreadsheet nobody opens. The Risks table holds each risk with its category, department, likelihood, impact, score, rating, owner, controls, response, mitigation plan, residual score and next review date. Six sample risks are included so the register is not empty on day one.
Anyone can raise a risk on the Raise a risk form page: a title, category, description, likelihood and impact (1-5 with plain-language labels), existing controls and the risk owner as a Person. The Risk submission workflow scores it (likelihood × impact), rates it with the Risk rating decision table (Low, Medium, High, Extreme), sets an SLA for the owner's review by rating and adds it to the register.
The owner reviews it in a task form with Accept, Mitigate and Escalate buttons: a mitigation plan, target date and residual rating are recorded, an escalation emails the risk committee, and the task escalates to the owner's manager if it sits for three days. A second workflow, Weekly risk review, runs every Monday: every open risk whose review date has passed goes back to its owner through a sub-workflow (still valid, rating changed, close risk). No integrations needed.