What this template is for
A centralized risk register for tracking and managing all identified supply chain risks across your supplier base. This downloadable template helps procurement professionals streamline their risk assessment process — no need to build complex spreadsheets from scratch.
Individual risk assessments are useless without a portfolio view
Assessing one supplier's risk profile tells you whether that supplier is a problem. But procurement risk is a portfolio problem: five medium-risk suppliers concentrated in the same geography create a higher aggregate exposure than one high-risk supplier operating in a diversified region. A centralized risk register aggregates every identified risk — across all suppliers, all categories, all geographies — into a single view where patterns become visible. The procurement director scanning the dashboard sees not just individual risk scores but concentrations: three critical suppliers all dependent on the same sub-tier semiconductor fab, or four high-risk suppliers all passing through the same port. That portfolio visibility is what drives investment decisions like dual-sourcing, safety stock, and supplier development.
Enterprise risk management designed for procurement, not imported from finance
Corporate risk registers are built for enterprise risks — strategic, financial, reputational. They lack the fields, categories, and treatment options that supply chain risks require. This register is purpose-built for procurement: it tracks Inherent and Residual risk separately (because controls matter), supports all four risk treatment strategies (Accept, Transfer, Mitigate, Avoid), and includes a risk review schedule with next-review-date alerts so risk owners cannot let assessments go stale. The dashboard surfaces the top 10 risks by score and shows treatment progress as a completion percentage — exactly the format procurement leadership needs for quarterly risk committee presentations.
What's included
- Risk register with ID, description, category, probability, impact, and risk owner
- Inherent and residual risk scoring columns
- Risk treatment plan (Accept/Transfer/Mitigate/Avoid) with action tracking
- Risk review schedule with next review date alerts
- Dashboard with risk heat map and top-10 risks by score
Who should use this
- Supply chain risk managers maintaining an enterprise view of supplier risks.
- Procurement leadership tracking risk mitigation progress across the supply base.
How to use it
- Enter each identified risk as a new row with unique Risk ID
- Score inherent risk (before controls) and residual risk (after controls)
- Select treatment strategy and assign an owner with target completion date
- Update status monthly and review at quarterly risk committee meetings
- Use the dashboard for executive reporting and trend analysis