Risk documents normally are documents in possession of the Project Manager with the discretion to show only to Project Team and Sponsor.
Risk register is a document that contains all the work involved in the identification, quantification, qualification and evaluation of risks in matrix/table.
- Risk report, is it a narrative document in summary of all the risks from the risk register?
- Is it addressed exclusively to Sponsor? Other than him?
- Are both deliverables? (Guess: Yes as they are output from Processes from PMI methodology)
- If both are deliverables they should be in the WBS?