AI Governance Engineer
GitHub

Risk register

By Updated

The evidence record of the risk loop: one versioned file per risk, keyed to a registry id, with ratings, treatment, controls that resolve to evidence, owner, acceptance, review cadence and links to evals, incidents and obligations. Deploy gates read it; it evidences an Article 9 risk management system 1.

Developed in
ch. 13, The risk register as an evidence record
Chapters
ch. 13, Risk Management
Contrast with
Exception register
Source
1 numbered reference, listed below

Where it is used

12 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Risk register: mentions per chapter43 mentions of the term across 12 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter07 Maturity Model: 2 mentions07 Maturity Model208 Regulatory Map: 10 mentions08 Regulatory Map1010 Reading List: 1 mention10 Reading List111 AI Defined: 1 mention11 AI Defined112 Governance Program: 2 mentions12 Governance Program213 Risk Management: 7 mentions13 Risk Management714 Development: 2 mentions14 Development215 Deployment: 2 mentions15 Deployment217 Incidents: 8 mentions17 Incidents818 EU AI Act: 2 mentions18 EU AI Act221 AI Laws Worldwide: 1 mention21 AI Laws Worldwide122 Principles & Standards: 5 mentions22 Principles & Standards5No mentions in the other 11 chaptersSource: the Body of Knowledgev0.5.0
Risk register: mentions per chapter43 mentions of the term across 12 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter0001020304050607 Maturity Model: 2 mentions20708 Regulatory Map: 10 mentions100810 Reading List: 1 mention11011 AI Defined: 1 mention11112 Governance Program: 2 mentions21213 Risk Management: 7 mentions71314 Development: 2 mentions21415 Deployment: 2 mentions2151617 Incidents: 8 mentions81718 EU AI Act: 2 mentions218192021 AI Laws Worldwide: 1 mention12122 Principles & Standards: 5 mentions52223Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Risk register per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles0No
04 The Stack0No
05 Patterns0No
06 The Role0No
07 Maturity Model2No
08 Regulatory Map10No
10 Reading List1No
11 AI Defined1No
12 Governance Program2No
13 Risk Management7Yes
14 Development2No
15 Deployment2No
16 Fairness & XAI0No
17 Incidents8No
18 EU AI Act2No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide1No
22 Principles & Standards5No
23 AI Agents0No
Risk register: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastRisk registerRelated terms (3)Evals · RelatedEvalsEvidence record · RelatedEvidence recordRisk management · RelatedRisk managementContrast with (1)Exception register · ContrastException register
Risk register: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastRelated terms (3)Evals · RelatedEvalsEvidence record · RelatedEvidence recordRisk management · RelatedRisk managementContrast with (1)Exception register · ContrastException registerRisk register
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of Risk register
FamilyItemRelation
Related termsEvalsRelated
Related termsEvidence recordRelated
Related termsRisk managementRelated
Contrast withException registerContrast
  • Evidence record

    The signed, structured record a control writes each time it decides: which control, about which system version, what it decided, against which metric…

  • Risk management

    The organised practice of steering an organisation's decisions with its risks in view: identify, assess, treat and monitor, in a loop.

  • Evals

    Automated tests of a model's or agent's behaviour (capability, safety and adversarial), run as controls, not as one-off research.

Sources

  1. [1] Regulation (EU) 2024/1689 (AI Act), consolidated text as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI, in force 27 Jul 2026; definitions in Art. 3, incl. 3(1), 3(3) to 3(14), 3(14b), 3(20), 3(22), 3(23), 3(29) to 3(32), 3(49), 3(55) to 3(57), 3(60), 3(61), 3(63), 3(68); Arts. 4, 5, 6 (incl. 6(3) third subparagraph, profiling), 9, 10, 11, 13, 14, 15, 17, 22 to 27 (incl. 26(11)), 40, 41, 43, 47, 48, 50, 53 (incl. 53(1)(c)), 55, 57, 60, 72, 73, 86; Annexes I, III, IV). Publications Office of the EU (EUR-Lex). 2026-07-27. https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Risk register. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/risk-register. CC BY 4.0

BibTeX

@misc{aige2026riskregister,
  author  = {Jorge García Aibar},
  title   = {{Risk register}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/risk-register}
}