#risicomanagement

An ISO risk register that works (and doesn't look like a consultant export)

A risk register doesn't have to be a 300-row spreadsheet. For an SMB, 30–60 risks is realistic. Here's a format that survives an audit and is actually useful day to day.