1. Risk Description (+10)

1. Risk Description

[Clear, concise description of the legal risk]

2. Background and Context

[Relevant facts, history, and business context]

3. Risk Analysis

Severity Assessment: [1-5] - [Label]

[Rationale for severity rating, including potential financial exposure, operational impact, and reputational considerations]

Likelihood Assessment: [1-5] - [Label]

[Rationale for likelihood rating, including precedent, triggering events, and current conditions]

Risk Score: [Score] - [GREEN/YELLOW/ORANGE/RED]

4. Contributing Factors

[What factors increase the risk]

5. Mitigating Factors

[What factors decrease the risk or limit exposure]

6. Mitigation Options

7. Recommended Approach

[Specific recommended course of action with rationale]

8. Residual Risk

[Expected risk level after implementing recommended mitigations]

9. Monitoring Plan

[How and how often the risk will be monitored; trigger events for re-assessment]

10. Next Steps

1. [Action item 1 - Owner - Deadline]
2. [Action item 2 - Owner - Deadline]

## Risk Register Entry


For tracking in the team's risk register:

| Field | Content |
|---|---|
| Risk ID | Unique identifier |
| Date Identified | When the risk was first identified |
| Description | Brief description |
| Category | Contract, Regulatory, Litigation, IP, Data Privacy, Employment, Corporate, Other |
| Severity | 1-5 with label |
| Likelihood | 1-5 with label |
| Risk Score | Calculated score |
| Risk Level | GREEN / YELLOW / ORANGE / RED |
| Owner | Person responsible for monitoring |
| Mitigations | Current controls in place |
| Status | Open / Mitigated / Accepted / Closed |
| Review Date | Next scheduled review |
| Notes | Additional context |