Risk registers: summary and guidance

Understand the difference between a risk assessment and risk register, and find out what a register should include and who has responsibility for it.

Last reviewed on 23 June 2023
School types: AllSchool phases: AllRef: 4347
  1. Risk registers are mandatory for academy trusts
  2. Maintained schools should produce risk registers
  3. Risk registers should focus on your strategic objectives
  4. Who's responsible for the risk register?

Risk registers are documents that allow a school's or trust's leadership – which includes the governing board – to plan for, track, and monitor key risks and risk controls for the whole school or trust.

Risk registers are mandatory for academy trusts

This is set out in paragraph 2.35 of the Academy Trust Handbook

If you're in a multi-academy trust (MAT), there's no rule on whether you need school-level registers as well. It's about what works for you as a trust.

Keeping 1 trust-wide register means fewer documents. It also reinforces the fact that your trust is 1 organisation, not lots of separate entities.


The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.