risk register

A document listing information about risks. It typically includes risk scores along with recommended security controls to reduce the risk scores.