{"text_format":"1","workbook":"xlsx","n_sheets":5,"sheets":["Introduction","Risk register","Worked example","Guidance on usage","Guidance on scoring"],"not_rendered":{"charts":0,"images":1,"macros":1,"external_links":0,"defined_names":9,"comments":2,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Introduction","index":0,"n_rows":15,"n_cols":2,"rows_kept":15,"cut":false,"hidden":false,"merged":[]}
[]
[null,"Risk register template v3 2024"]
[]
[]
[null,"Original version generously donated to the ISO27k Toolkit in 2007 by Madhukar."]
[null,"Extensively modified in 2012 and 2024 by Gary Hinson, adding worked examples, percentages, conditional formatting and notes"]
[]
[null,"Click here for advice on using the risk register"]
[null,"Click here for a worked example"]
[null,"Click here for guidance on how to 'score' the probabilities, impacts and hence risks"]
[null,"This 'risk register' is a structured way to record and analyze your information risks.  It is simply a template or starting point.  It may not be suitable or adequate for your organisation so feel free to customise it according to your specific needs.  "]
[null,"The assessment is based on the simplistic formula:  Risk = Probability x Impact   where probability and impact are percentage values.  Mathematicians may quite rightly complain at using numbers in this manner but nevertheless this crude approach helps us rank and prioritise the risks, helping management focus on the most serious risks.  It may not be perfect but experience shows that it is generally good enough for most practical purposes."]
[null,"You may prefer the alternative formula:  Risk = Threat x Vulnerability x Impact  or some other variant.  If you have sufficient historical data, you may be able to assign more precise quantitative values to information security incidents that occur frequently (e.g. data entry errors, malware, spam ...).  Good luck!  For bonus marks, conduct a sensitivity analysis using different formulae, data and assumptions, investigating any significant differences between the outputs for additional insight into the risks ... but beware of \"analysis paralysis\".   Don't forget that risk analysis is primarily a tool supporting management decisions, not a rigorous scientific study in its own right.  Don't sink all your resources and time into the risk assessment and neglect to treat the risks!"]
[null,"This work is copyright © 2024, ISO27k Forum, some rights reserved.  It is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike International license.  You are welcome to reproduce, circulate, use and create derivative works from this provided that:\n(a) it is not sold or incorporated into a commercial product;\n(b) it is properly attributed to the ISO27k Forum at www.ISO27001security.com; and\n(c) if they are published or shared, derivative works are shared under the same terms as this."]
[null,"To show your appreciation for this and other materials generously donated to the ISO27k Toolkit by other ISO27k users, please participate in the ISO27k Forum, comment on this template, and/or donate your own templates and example documents to continue expanding the ISO27k Toolkit.  The toolkit is the product of a non-commercial community self-help project: the more we put in, the more we get out.  Thank you for your interest and engagement."]

{"sheet":"Risk register","index":1,"n_rows":25,"n_cols":17,"rows_kept":25,"cut":false,"hidden":false,"merged":[]}
[]
[null,"    Risk ID\n","Risk","    Owner","Impact","    Raw probability","    Raw impact","    Raw risk rating","Treatment","    Treatment cost","    Treatment status","    Treated probability","    Treated impact","    Target risk rating","    Current risk rating","Notes","Last update\n"]
[null,null,null,null,null,null,null,{"$f":"F3*G3","v":0},null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},{"$f":"L3*M3","v":0},{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]
[null,null,null,null,null,null,null,0,null,null,null,{"$f":"Table24[[#This Row],[    Raw probability]]","v":0},{"$f":"Table24[[#This Row],[    Raw impact]]","v":0},0,{"$f":"Table24[[#This Row],[    Raw risk rating]]-(Table24[[#This Row],[    Treatment status]]*(Table24[[#This Row],[    Raw risk rating]]-Table24[[#This Row],[    Target risk rating]]))","v":0}]

{"sheet":"Worked example","index":2,"n_rows":11,"n_cols":17,"rows_kept":11,"cut":false,"hidden":false,"merged":[]}
[]
[null,"    Risk ID\n","Risk","    Owner","Impact","    Raw probability","    Raw impact","    Raw risk rating","Treatment","    Treatment cost","    Treatment status","    Treated probability","    Treated impact","    Target risk rating","    Current risk rating","Notes","Last update\n"]
[null,"12/10","Insider incident ","GH","An insider exploits their access to steal, modify or delete information",0.88,0.66,{"$f":"F3*G3","v":0.58079999999999998},"Oversight, logging, alarms and alerts",1000,0.5,0.87,0.85,{"$f":"L3*M3","v":0.73949999999999994},{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":0.66015000000000001},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/4","Global warming","GH","Extreme weather events",0.75,0.66,0.495,"Carbon tax",1000,0.5,0.1,{"$f":"G4","v":0.66},6.6000000000000003E-2,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":0.28049999999999997},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/9","Malware","GH","Identity theft, exfiltration/theft of sensitive information, data corruption, ICT service outages",0.95,0.35,0.33249999999999996,"Antivirus, security awareness, backups",450,0.5,0.25,0.4,0.1,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":0.21625},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/6","New information security or privacy obligations introduced by laws and regulations etc.","GH","Noncompliance penalties",0.75,0.44,0.33,"Alertness for new compliance obligations",200,0.9,0.1,{"$f":"G6","v":0.44},4.4000000000000004E-2,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":7.2599999999999998E-2},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/3","Earthquakes, tsunamis, eruptions","GH","Devastation of the immediate area, some environmental damage",0.5,0.2,0.1,"Business continuity arrangements",500,0.8,{"$f":"F7","v":0.5},0.05,2.5000000000000001E-2,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":3.9999999999999994E-2},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/8","Spam","GH","Wasted resources, overload, diversion",1,0.15,0.15,"Spam filtering, security awareness",300,0.9,0.05,0.1,5.000000000000001E-3,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":1.949999999999999E-2},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/2","Small meteor striking Earth","GH","Devastation of the immediate area",0.25,0.05,1.2500000000000001E-2,"Share in an international ballistic missile defense system",5000,0,{"$f":"F9","v":0.25},0.01,2.5000000000000001E-3,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":1.2500000000000001E-2},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/1","Large meteor striking Earth","GH","Devastation of the immediate area, severe environmental damage",0.01,1,0.01,"Share in an international interplanetary ballistic missile defense system",10000,0,0,0.2,0,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":0.01},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]
[null,"12/5","Supernova destroys the sun","GH","Total destruction",0.99,1,0.99,"Accept the risk: it is probably not worth surviving!",0,1,0,1,0,{"$f":"Table2[[#This Row],[    Raw risk rating]]-(Table2[[#This Row],[    Treatment status]]*(Table2[[#This Row],[    Raw risk rating]]-Table2[[#This Row],[    Target risk rating]]))","v":0},"WORKED EXAMPLE!  This information is entirely fictitious.","2012-09-01"]

{"sheet":"Guidance on usage","index":3,"n_rows":24,"n_cols":3,"rows_kept":24,"cut":false,"hidden":false,"merged":[[19,1,19,2],[20,1,20,2],[21,1,21,2],[22,1,22,2],[23,1,23,2]]}
[]
[null,"Column","Notes"]
[null,"ID","Assign a unique reference in order to be able to identify each risk unambiguously (e.g. \"24/27\" might be the 27th information security risk added to the register during 2024).  Sequential numbers facilitate sorting the register according to when risks were added."]
[null,"Risk","Describe the information security risk briefly so that people will understand what risk you are assessing."]
[null,"Owner","Who is the Risk Owner or Information Asset Owner, the person (or their job title) who will be held personally to account if the risk treatments are inadequate, incidents occur and the organization is adversely impacted?  It is in this person's interest to assess and treat the risks adequately, or face the consequences.  They have the authority to decide on the treatments and provide the requisite resources."]
[null,"Impact","Describe the potential impacts should the risk occur, ideally in business terms.  Decide whether to use \"worst case\" or \"anticipated\" impacts and be consistent about it!  Consistency is especially important as the risk register grows and more people get involved in the assessments."]
[null,"Raw probability","Enter the probability or likelihood that the risk would occur if it was totally untreated, as a percentage value (see the guidance on scoring)."]
[null,"Raw impact","Enter the potential business impact if the risk occurred without any treatment, as a percentage value (see the guidance on scoring)."]
[null,"Raw risk rating","This is the calculated product of the raw probability and impact values, in other words the raw/untreated/inherent level of risk.*"]
[null,"Risk treatment","Describe how the risk is to be treated.  Note that controls are just one option: risks can also be avoided, transferred or accepted."]
[null,"Treatment cost","Estimate the total cost of treating the risk."]
[null,"Treatment status","To what extent is the planned treatment in place?  0% means the treatment is only a plan at present - nothing has been done about it as yet.  100% means the treatment is fully operational, fully applied to all applicable target environments."]
[null,"Treated probability","Enter the probability that the risk will eventuate once the controls etc. are fully in effect, in the same way as for before mitigation (see the guidance on scoring).  Treated values are shown in bold if they are different to the raw values."]
[null,"Treated impact","Enter the likely impact once the controls etc. are fully in effect, in the same way as before mitigation (see the guidance on scoring).  Note that the impact of any incidents that actually do occur may INCREASE with strong controls in place, since incidents due to control failures are not usually expected.  Treated values are shown in bold if they are different to the raw values."]
[null,"Target risk rating","This is the calculated product of the anticipated probability and impact values once the risk treatment is fully implemented.*"]
[null,"Current risk rating","This is the calculated risk rating today, given the implementation status and anticipated probability and impact values when fully completed.  For example, if the raw risk value is 50% and the treated risk value is 30% but the treatment is only 50% implemented, the current risk level is 40%.  In reality, many security controls are either fully implemented and fully effective, or partially implemented and not at all effective - but the risk calculation here takes into account the fact that work is under way, hence management can assume it will be treated in due course.*"]
[null,"Notes","Keep notes about the risks e.g. the factors you have taken into account when scoring, and your reasoning, including any significant assumptions."]
[null,"Last update","Record the date on which the risk was last reviewed, updated and/or [re]approved by management.  Sort on this column to find risks that have not been checked in a long time and hence maybe should be reviewed or reconfirmed."]
[]
[null,"Note: you can sort the entire table on any column by clicking the triangle on the column heading.  An arrow shows which column was last used."]
[null,"Make sure the conditional formatting is correctly coloring the risk ratings: it is typically a \"colour scale\" using 3 colours (red, amber and green)\ncorresponding to the values 100%, 50% and 0%.  Excel uses intermediate colours for intermediate values."]
[null,"Some users will find the risk percentages distracting, especially as there is substantial uncertainty about the numbers (they are the products of estimated values)\nso you may prefer to hide the text and rely on the colours.  Remember that the primary purpose of this inventory is to \nsupport sensible business decisions and track progress on risk treatments.  It is not a mathematical exercise."]
[null,"The 'worked example' sheet shows a few sample risks to demonstrate how the risk register works.  All data are fictitious!"]
[null,"Hinson tip: maintain tight control over changes to this register.  Archive all historical versions.  If serious incidents occur on your watch, don't be surprised if senior management questions and challenges the risk analysis, complaining bitterly that the process was patently flawed, the risks weren't correctly identified or rated, the treatments were wholly inadequate/inappropriate, and everyone involved was clearly inept, deluded or malicious - regardless of the actual reasons.  "]

{"sheet":"Guidance on scoring","index":4,"n_rows":13,"n_cols":9,"rows_kept":13,"cut":false,"hidden":false,"merged":[[12,1,12,8],[1,1,1,3],[4,0,8,0],[0,4,0,8],[10,1,10,8],[11,1,11,8]]}
[null,null,null,null,"Business impact"]
[null,null,null,null,"Insignificant","Minor","Moderate","Major","Extreme"]
[null,null,null,null,"Minimal if any operational impact, negligible costs","Noticeable but limited operational impact, some costs","Substantial operational impact, very costly","Severe loss of operational capability, highly damaging and extremely costly but survivable","Complete operational failure, existential, \"bet the farm\" impact, unsurvivable"]
[null,null,null,null,1E-3,0.33,0.5,0.67,1]
["Probability","(Almost) certain","We are bound to experience further incidents of this nature - in fact they are probably\noccuring right now!",1,{"$f":"$D$5*E4","v":1E-3},{"$f":"$D$5*F4","v":0.33},{"$f":"$D$5*G4","v":0.5},{"$f":"$D$5*H4","v":0.67},{"$f":"$D$5*I4","v":1}]
[null,"Probable","We are likely to experience incidents of this nature\nbefore long",0.67,{"$f":"$D$6*E4","v":6.7000000000000002E-4},{"$f":"$D$6*F4","v":0.22110000000000002},{"$f":"$D$6*G4","v":0.33500000000000002},{"$f":"$D$6*H4","v":0.44890000000000008},{"$f":"$D$6*I4","v":0.67}]
[null,"Possible","It is distinctly possible that\nwe will experience incidents\nof this nature",0.5,{"$f":"$D$7*E4","v":5.0000000000000001E-4},{"$f":"$D$7*F4","v":0.16500000000000001},{"$f":"$D$7*G4","v":0.25},{"$f":"$D$7*H4","v":0.33500000000000002},{"$f":"$D$7*I4","v":0.5}]
[null,"Unlikely","Incidents of this nature are uncommon but there is a genuine chance that we may experience them at some future point",0.33,{"$f":"$D$8*E4","v":3.3E-4},{"$f":"$D$8*F4","v":0.10890000000000001},{"$f":"$D$8*G4","v":0.16500000000000001},{"$f":"$D$8*H4","v":0.22110000000000002},{"$f":"$D$8*I4","v":0.33}]
[null,"Rare","Although they are conceivable, we will probably never experience incidents\nof this nature",1E-3,{"$f":"$D$9*E4","v":9.9999999999999995E-7},{"$f":"$D$9*F4","v":3.3E-4},{"$f":"$D$9*G4","v":5.0000000000000001E-4},{"$f":"$D$9*H4","v":6.7000000000000002E-4},{"$f":"$D$9*I4","v":1E-3}]
[]
[null,"The colors are generated automatically using Excel's conditional formatting.\nDon't obsess about the values: concentrate on the need to mitigate those unacceptable red/amber risks! "]
[null,"The values, colours and cells are all arbitrary.  They are merely indicative.  The primary purpose of this register and the associated analytical process is to indicate and \ndraw management's attention to what are believed to be the more significant risks, the ones typically most in need of being mitigated \nto fall within management's risk tolerance level.\n"]
[null,"This is not a precise scientifically-sound process.  We are simply trying to predict and control an inherently uncertain future."]