A Simple Risk Register for Consulting Projects

Risk management is not predicting everything that could go wrong. It is noticing the few conditions that could change the result and deciding what to do while you still have options.

A simple risk register gives you a shared record for deciding what needs attention before the next check-in.

The five columns

Use one row per risk:

1. Risk: What might happen?

2. Signal: What would tell you it is becoming likely?

3. Impact: What would change if it happened?

4. Owner: Who can reduce or accept it?

5. Next action: What will happen before the next check-in?

Do not write “project may be delayed.” Write “client approval may arrive after the research window closes.” Specific risks produce specific actions.

Start with the usual consulting risks

At the beginning of an engagement, scan for:

• A decision-maker who has not joined the process
• Data or access that depends on another team
• A deadline tied to an event outside your control
• An assumption that has not been tested
• A deliverable with several unaligned reviewers
• A client team without time to implement the recommendation

These are not accusations. They are conditions worth making visible.

Rate for attention, not drama

Use a simple low, medium, or high rating for likelihood and impact. The rating is a sorting aid, not a prediction. A low-likelihood, high-impact risk may deserve one preventive action. A medium-likelihood, low-impact risk may simply need monitoring.

Every risk should have one next action. “Monitor” is valid only when you define what you will watch and when you will review it.

Review the register weekly

Put the register into the weekly update. Close risks that no longer apply, add new signals, and escalate anything that needs a client decision. A risk that stays unchanged for three weeks may be background noise—or a sign that nobody owns it.

Make escalation useful

When you raise a risk, include a recommendation. “The approval is late” forces the client to diagnose the problem. “The approval is late; I recommend reviewing the draft with the sponsor tomorrow so we can protect the Friday milestone” makes action easier.

The goal is not to look cautious. It is to preserve choices for the client and protect the quality of your work.

Your next step

Build a five-column register for your current engagement and bring the top two risks to the next client update.

[Build a clearer consulting practice with ConsultKit →](https://getconsultkit.com)