A risk register is simply a collection of risk descriptions. However, most risk registers do not sufficiently capture the background knowledge which the contained risk descriptions are based on. To account for this, the ...