Yes. Schemes need to establish and maintain a risk register. The risk register should identify the risks, the board’s assessment of the risks and the measures implemented to manage the risks identified. The Authority is currently developing a template that will assist schemes without a risk register develop one.