Risk Register and treatment plan template

[harishpr]

Hi,
We are in the process of completing the implementation of ISO 20K for our operations. As part of IT Security process area, one of the key requirement is to design the Risk Register and treatment Plan.
Im trying to design a Excel Register that shall act as a central repository of all our risks (operations, capacity, availability, security, staff, human rexource, budgets etc) and appropriate treatment plan.
Im struggling to come up with an appropriate template, can you help me ? Is there a Risk register template that i can leverage ??

[Diarmid]

I'm not a great believer in using someone else's template. There is such a possibility of it driving your approach inappropriately, of it lacking something of high value to you, and of containing elements of no value to you.

From your post it sounds that you are past that stage anyway and not far from knowing what you want.

I would suggest you write down all the items of information that you want to be able to see in the register (things like responsibility, quantification, actions required, dates, risk acceptance sign-off, etc.), think about how you need to access the information (viewing and analysis requirements), think about how to get the information into the register (manual or electronic sources, workflow), and then sketch out a template to meet these needs and experiment with it until you are happy.

Start simple and add elements when you are clear about their need.
_________________
"Method goes far to prevent trouble in business: for it makes the task easy, hinders confusion, saves abundance of time, and instructs those that have business depending, both what to do and what to hope."
William Penn 1644-1718