Skip to content

Managing the Strategic Risk Register

How trustees and group admins log, review, and track organisational risks using the 5×5 matrix — distinct from per-event risk assessments.

Filed undertrusteesgovernancerisk registerrisk management

Scout groups are charities, and the Charity Commission expects them to maintain a register of the strategic risks facing the organisation — things like changes in leader numbers, funding uncertainty, or data protection obligations. The Strategic Risk Register in Scoutworks gives trustees and group admins one place to record, rate, and track those risks, with a visual matrix that makes it easy to see at a glance where attention is needed.

This is separate from event-level risk assessments. Those cover specific activities (camp fire safety, trip transport). The risk register covers the group as a whole.

Where to find it

Go to Group Insights in the sidebar, then click the Risk Register tab across the top.

The 5×5 risk matrix

The tab opens with a heatmap showing all active risks plotted by Likelihood (1–5, left to right) and Impact (1–5, bottom to top). Each cell is colour-coded:

ColourTierScore range
GreenLow1–4
AmberMedium5–9
OrangeHigh10–16
RedCritical17–25

Click any cell to filter the list below to just the risks sitting in that position. Click it again to clear the filter.

A badge in the top-right of the matrix shows the total number of Critical and High risks, so they are always visible even before anyone scrolls down.

Adding a risk entry

Click Add Risk in the top-right of the page — or click Add First Risk if the register is empty.

FieldWhat to enter
CategoryChoose the area the risk falls into: External, Operational, Financial, Legal & Regulatory, Governance, or Data Protection
TitleA short, clear name for the risk (e.g. "Succession gap — treasurer role")
DescriptionA fuller explanation of what the risk is and why it matters
LikelihoodScore from 1 (very unlikely) to 5 (almost certain)
ImpactScore from 1 (minor) to 5 (severe)
Mitigation planWhat the group is doing to reduce or manage the risk
OwnerThe trustee or leader responsible for this risk
Next review dueWhen this entry should be revisited
StatusActive, Mitigated, Accepted, or Closed

As you set the Likelihood and Impact scores, the Risk Score and Tier update live so you can see the rating before saving.

Reviewing and editing entries

Click any row in the list to open that entry and edit it. When you save an edit you will see an optional Reason for change field — filling this in builds an audit trail, which is useful for the annual trustee report.

The list can be filtered by Category, Tier, or Status, and sorted by Risk Score, Title, Next Review date, Tier, or Category.

If any active risk entries are past their review date, an amber banner appears at the top of the tab listing how many are overdue.

Removing an entry

To remove a risk entry, open its row menu (the three-dot icon on the right) and choose Delete. You will be asked to confirm before anything is removed. Deletion is permanent.

If the risk has been managed rather than removed, consider marking it Closed or Mitigated instead — that keeps the history visible without cluttering the active list.

The risk register in the board pack

When you export a Board Pack PDF from the Actions menu on Group Insights, the current risk register is included automatically — tier counts, a summary of each active entry, and the names of any overdue reviews. No extra steps needed.

What's next

Was this article helpful?

What's next?

Related guides

Six-month free trial

Start your free trial today

Try every feature free for six months, then decide.

Six months free
Full feature access
Cancel anytime