ISO 9001:2026 Risk and Opportunity Register Template (Excel)
Short answer: ISO 9001:2026 sets out actions on risks (6.1.2) and actions on opportunities (6.1.3) in separate sub-clauses. A register that keeps them on separate sheets, each with its own scoring and effectiveness review, makes that easy to show. Ours does that in Excel, with automatic heat maps, a management review summary, 48 worked examples and an 8-page Word procedure. $49, instant download.
See the Risk and Opportunity Register, or read our guide to clauses 6.1.2 and 6.1.3.
Checked line by line against the published ISO 9001:2026 (version 1.1, October 2026).
Does ISO 9001:2026 require a risk register?
No. The standard does not require a register, two registers or any particular scoring method. It requires you to determine risks and opportunities, plan actions, integrate them into your processes and evaluate whether the actions worked. A register is simply the most common way to keep that evidence in one place. If your current register mixes risks and opportunities in one list, or treats opportunities as an afterthought, splitting them is the quickest way to line up with the 2026 structure.
What a usable register contains
- A clear source for each entry: context, interested parties, processes, changes or audit findings.
- A scoring method you can explain, with inherent and residual ratings for risks.
- An action with an owner and date, linked to the process it lives in.
- An effectiveness check: did the action change the rating or deliver the benefit?
- A summary top management can read in two minutes at management review.
What is in the template
| Part | What it does |
|---|---|
| Risk register | Likelihood and consequence on a 5 by 5 matrix, inherent and residual ratings, treatment actions, owners, dates and effectiveness review. |
| Opportunity register | Benefit and feasibility scoring, pursue or park decisions, actions and results. |
| Heat maps and summary | Built automatically for both registers. One page for management review. |
| 48 example entries | 28 risks and 20 opportunities for manufacturing and service businesses, including supply disruption and continuity. |
| Procedure (Word, 8 pages) | How to determine, analyze, evaluate and act on risks and opportunities and build actions into your processes. |
The scoring scales are examples. Edit them to suit your business.
Climate change and supply risks
The 2026 edition keeps climate change as a consideration when you determine your context. If you decide it is relevant, it usually appears in the register as a risk to supply, sites or customers. The template's examples include supply disruption entries you can adapt. Our climate change guide shows how to decide relevance.
Register alone or with the context pack?
Risks and opportunities come from your context and interested parties. If those records are thin, pair the register with the Context, Interested Parties and Climate Change Pack ($39). Both are included in the Transition Toolkit ($199).
Important limits
The template summarizes requirements in our own words and does not reproduce ISO 9001. Use it with your licensed copy of the standard.
Online course
ISO 9001:2026 Lead Implementer Course (Online, Certificate of Completion)
Learn this topic properly: short lessons, worksheets with model answers, a 100% pass mark on every lesson quiz and a certificate of completion. Unlimited access for $349.
Templates that do this job
Editable Word and Excel files. Instant download. Licensed for one organization.
Frequently asked questions
Does ISO 9001:2026 require a risk register?
No. It requires you to determine risks and opportunities, plan and integrate actions and evaluate their effectiveness. A register is a common way to keep that evidence together, not a requirement.
Why separate risks and opportunities?
The 2026 edition sets out actions on risks (6.1.2) and opportunities (6.1.3) in separate sub-clauses. Separate sheets make it easier to show you addressed both, but the layout is a design choice you can change.
Can we change the 5 by 5 scoring?
Yes. The scales are examples. Change the labels or matrix size and the heat maps follow.
Are the example entries specific to one industry?
They cover common manufacturing and service situations, such as supplier failure, key-person loss and new market opportunities. Delete what does not apply.
Can I move our existing entries across?
Yes. Paste them into the two sheets and rescore. Most companies do this in an afternoon.
Want to learn it properly?
Self-paced ISO 9001:2026 and ISO 13485 courses with unlimited access, worksheets with model answers and a certificate of completion. From US$79.