COMPEL Glossary / risk-register
Risk Register
A risk register is a comprehensive, living document that catalogs all identified AI-related risks for a transformation program or portfolio, recording each risk's description, probability assessment, potential impact, current mitigation measures, residual risk level, assigned owner, review frequency, and status.
What this means in practice
The register serves as the central governance tool for risk management, providing a consolidated view that enables pattern recognition, trend analysis, and portfolio-level risk assessment. For organizations managing multiple AI initiatives, the risk register prevents risks from falling through the cracks between teams and ensures that mitigation actions are tracked to completion. In COMPEL, the risk register is established during Calibrate, maintained throughout the COMPEL lifecycle, and reviewed during Evaluate, with portfolio-level risk aggregation covered in Module 4.1, Article 5.
Why it matters
A comprehensive risk register prevents AI-related risks from falling through the cracks between teams, providing a consolidated view that enables pattern recognition, trend analysis, and portfolio-level risk assessment. Without a living risk register, organizations manage risks ad hoc, miss systemic patterns, and cannot demonstrate governance maturity to regulators, auditors, or partners. The register is the central nervous system of AI risk management.
How COMPEL uses it
The risk register is established during Calibrate, maintained throughout the COMPEL lifecycle, and reviewed during Evaluate. Portfolio-level risk aggregation is covered in Module 4.1, Article 5. During the Model stage, identified risks are catalogued with probability, impact, mitigation, and ownership. The Governance pillar (D14-D18) enforces regular risk register review, and the Learn stage updates risk assessments based on operational experience.
Related Terms
Other glossary terms mentioned in this entry's definition and context.