Develop the Risk Register

The risk register is the living, central record of every identified risk on the project — this task is where everything gathered during identification gets consolidated into that single, structured artifact. It starts with analyzing the validity of what's been identified: not every candidate risk and trigger that surfaces during identification exercises actually belongs in the register, and screening out noise is part of the job.

For each risk that does belong, the register captures its core attributes — probability, impact, and urgency — along with its origin and ownership, classified as either internal (within the project team's control) or external (outside it, like a regulatory change or a market shift). Every entry gets classified as a threat or an opportunity, consistent with how it was indicated during identification.

Study focus: the risk register is one of PMI-RMP's most heavily tested artifacts precisely because so many other tasks — analysis, response planning, monitoring — all operate on it. Know what it contains (probability, impact, urgency, origin, ownership, threat/opportunity classification) cold, since later domains assume you already know this structure.