A risk register can be described as a log or repository of the various risk assessments and control performed within an organization. It is a dynamic document which enables the organization to understand its comprehensive risk profile. It provides a structure for collecting information about risks that will assist both in the analysis of risks and in decisions about whether or how these risks should be controlled, managed and monitored.