Which statement best describes the purpose of a risk register in contract management?

• A. It is a template for marketing the project.
• B. It lists only financial risks.
• C. It records only vendor performance metrics.
• D. It documents identified risks, assesses probability and impact, and tracks mitigation actions.

Answer: (D)

A risk register in contract management is a living tool that captures identified risks, evaluates how likely they are and how big their impact could be, and tracks the actions taken to mitigate them, along with owners and deadlines. This combination—documentation, assessment, and tracking—is what makes it valuable: it helps prioritize which risks to address, monitors whether mitigation is effective, and keeps stakeholders informed over the contract’s life.

Other options describe narrower or unrelated things. A marketing template isn’t about managing risk. Listing only financial risks misses other important threats to the contract. Recording only vendor performance metrics ignores many other risk sources and mitigation needs. The described statement captures the full purpose: a comprehensive record of risks, their likelihood and impact, and the actions you’re taking to manage them.