A well-maintained risk register helps management identify, prioritise, and respond to risks effectively. All entities, regardless of size, complexity, or service delivery role, should document and regularly update their risks in a risk register to support effective management and ongoing monitoring. In this blog, we highlight why a reliable risk register is integral to managing risk and what it should include.

Each year, we review how well Queensland public sector entities are managing the information technology systems that support their delivery of public services. This blog reminds entities about our advice and shares some actions all entities should prioritise.

Think about how many third-party vendors your organisation relies on across your supply chain – information technology (IT) vendors, software development teams, accounting firms, marketing businesses, consultants; the list goes on!