In the PMI process, they include a document called a Risk Register. It contains a list of all the risks -- realized and unrealized -- including some fields like probability and impact.
For software projects, what kind of fields should we include in a risk register? Mine tend to have: - Risk name - Risk severity (low/moderate/high/terminal) - Risk probability (low/medium/high) - Risk state (eg. accepted, monitor, minimized) - Risk trigger (how do we know this risk occurred?)
What else can you put in there that has value, without creating a huge, bloated documented?
This question is somewhat intended as a community wiki question.