A risk register template helps an acquisition team record supported findings, likelihood, impact, an owner, evidence and a counsel flag. Use the visible table or download the editable CSV without a form. Replace illustrative rows with verified findings, keep missing evidence open and connect each agreed action to the operating plan.
In short
- Use the visible table or download the ungated CSV with the same columns and example risks.
- Every risk needs likelihood, impact, an owner, evidence and a counsel flag.
- The example rows are Illustrative; replace them with supported findings from the target.
What does the acquisition risk register template include?
The template records the risk, likelihood, impact, accountable owner, supporting evidence and counsel flag. The visible rows show how those fields fit together; they are illustrative examples rather than findings about a target. Replace the examples before using the register for an acquisition decision.
| Risk | Likelihood | Impact | Owner | Evidence | Counsel flag |
|---|---|---|---|---|---|
| Illustrative Lead-form consent wording | High | High | Marketing lead | Example public lead form and dated observation; internal handling remains an access request | Review with counsel |
| Illustrative Exposed admin login | Medium | High | IT lead | Example passive public-source record and dated observation; internal controls remain an access request | Assess with counsel if legal questions arise |
Find the accompanying checklists in the private equity due diligence resources.
How should a deal team use the risk register?
Copy the template into the working review, replace each example with a supported finding and assign an accountable owner. Keep missing evidence explicit, review the ratings with the deal team and route legal questions to counsel before relying on a legal conclusion.
- Write the risk as a specific event or condition and describe the effect it could have on the acquisition plan.
- Agree what likelihood and impact mean for this review before assigning ratings.
- Record the evidence source, observation date and any limits on what it establishes.
- Assign the owner who will resolve the question or manage the response.
- Set the counsel flag when legal interpretation is needed and keep that question open until reviewed.
- Carry the supported action into the plan and update the register when new evidence changes the finding.
What should each risk in a register include?
Each risk should include likelihood, impact, an owner, evidence and a counsel flag. The risk statement should be specific enough for another reviewer to understand the concern, find its source and see which question remains unresolved.
The sample diligence deliverables show how the register sits beside the plan and scorecard.
Which risk findings need additional access or counsel?
A public observation can establish what was visible at the time, but it may leave internal causes, controls and consequences unresolved. List the authorized record or review needed to close that gap. Use the counsel flag for legal questions; a rating alone cannot establish compliance.
| Risk | Rule | Likelihood | Impact | Counsel |
|---|---|---|---|---|
| Lead-form consent wording | TCPA | High | High | Counsel flag |
| Low-contrast text, unlabeled fields | ADA | High | Medium | Counsel flag |
| AI-voice calls without consent | TCPA | Medium | High | Counsel flag |
| Tracking tags on sensitive pages | GDPR, CCPA | Medium | Medium | Counsel flag |
| Review incentives tied to sentiment | FTC rule | Low | High | Counsel flag |
| Unanswered public reviews | Reputation | Medium | Low |
The grid is an illustrative prioritization aid. Keep an unverified internal condition as an open question and identify the permission, record or specialist review needed. Not legal advice; legal questions go to counsel.
The private equity due diligence checklist helps organize evidence requests across the review.
How can I download the risk register template?
Download the CSV without a form, or copy the visible HTML table into your working document. The CSV has the same columns and illustrative risks as the table. Retain the example labels until you replace the rows with the target’s own evidence and ratings.
Download the risk register template (CSV)
Connect supported actions to the 100-day value creation plan, with an owner and a completion measure.
Meo Advisors Editorial writes and maintains this page. Its numbers are Meo Advisors’ own statements or cited external benchmarks, and every mock is labelled Illustrative. See the editorial policy and corrections process.