Cross-phase · Template
Risk Register.
Living log of identified risks across the engagement: likelihood, impact, owner, mitigation, trigger, and status. Opened in Week 1; reviewed at every Gate.
Every Gate review closes or re-scores each open risk. Cannot carry a Red item past Gate 3.
Faithful mirror
This HTML is a read-only projection of
lighthouse-risk-register.xlsx. For filling in a live engagement, open the XLSX file.
§00
Workbook overview
This workbook contains 3 sheets. Each sheet below is rendered as a read-only table — for filling in a live engagement, open the XLSX version.
§01
Sheet · Risk Register
| UMBRA STUDIO — RISK REGISTER | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Lighthouse Sprint — Comprehensive Risk Tracking | ||||||||||
| Client: | [Client name] | |||||||||
| Sprint: | [Project name] | |||||||||
| Sprint Lead: | [Name] | |||||||||
| ID | Category | Description | Probability (1-5) | Impact (1-5) | Risk Score | Mitigation Strategy | Owner | Status | Date Identified | Date Resolved |
| R01 | Organizational | Stakeholder resistance to workflow change — fear of job displacement or loss of control | 0 | [Engagement plan, early wins, training] | [Name] | Open | 2026-04-21 | |||
| R02 | Technical | API rate limits on third-party integrations — inability to scale agent throughput | 0 | [Batch processing, queue strategy, vendor negotiation] | [Name] | Open | 2026-04-21 | |||
| R03 | Organizational | Scope creep — requests to automate additional workflows beyond the single target workflow | 0 | [Strict scope gate, change request process] | [Name] | Open | 2026-04-21 | |||
| R04 | Technical | Data quality insufficient for agent training — garbage in, garbage out | 0 | [Data audit, quality gates, manual review layer] | [Name] | Open | 2026-04-21 | |||
| R05 | Organizational | Key stakeholder leaves during sprint — loss of SME context and decision authority | 0 | [Documentation, knowledge transfer sessions] | [Name] | Open | 2026-04-21 | |||
| R06 | Compliance | Regulatory compliance not fully understood — agent violates compliance rules mid-deployment | 0 | [Compliance audit, lawyer review, manual override gates] | [Name] | Open | 2026-04-21 | |||
| R07 | Timeline | Unexpected system downtime or data access delays — blocks observation or testing | 0 | [Redundant access, early testing, fallback systems] | [Name] | Open | 2026-04-21 | |||
| R08 | Budget | Cost overruns due to extended build time or additional tooling requirements | 0 | [Fixed-scope contract, regular budget reviews] | [Name] | Open | 2026-04-21 | |||
| R09 | Technical | Agent performance degrades in production — latency, accuracy, or cost worse than baseline | 0 | [Performance benchmarks, gradual rollout, rollback plan] | [Name] | Open | 2026-04-21 | |||
| R10 | Organizational | Client loses executive sponsorship — project deprioritized or defunded mid-sprint | 0 | [Regular stakeholder reviews, early wins communication] | [Name] | Open | 2026-04-21 |
§02
Sheet · Risk Matrix
| RISK MATRIX (5x5 Probability × Impact) | |||||
|---|---|---|---|---|---|
| Probability \ Impact | 1 | 2 | 3 | 4 | 5 |
| 1 | 1 | 2 | 3 | 4 | 5 |
| 2 | 2 | 4 | 6 | 8 | 10 |
| 3 | 3 | 6 | 9 | 12 | 15 |
| 4 | 4 | 8 | 12 | 16 | 20 |
| 5 | 5 | 10 | 15 | 20 | 25 |
| Color Legend: | |||||
| Green (1-5) — Low Risk | |||||
| Yellow (6-12) — Medium Risk | |||||
| Orange (13-20) — High Risk | |||||
| Red (20+) — Critical Risk |
§03
Sheet · Risk Categories
| RISK CATEGORY DEFINITIONS | ||
|---|---|---|
| Category | Definition | Examples |
| Technical | Issues with systems, APIs, data, or agent performance | • API rate limits • Data quality • System downtime • Integration failures • Performance degradation |
| Organizational | People, culture, change management, stakeholder alignment | • Resistance to change • Key person departure • Scope creep • Lack of sponsorship • Training inadequacy |
| Compliance | Regulatory, audit, security, or legal constraints | • Compliance violations • Data privacy issues • Audit failures • Security breaches |
| Timeline | Schedule delays, missed deadlines, pacing risks | • Unexpected delays • Resource unavailability • Dependency blockages • Compressed timelines |
| Budget | Cost overruns, insufficient funding, resource constraints | • Cost overruns • Budget cuts • Resource constraints • Scope change impact |