risk register

Catalog of identified risks with scoring, mitigations, and ownership for ongoing governance.