Describe the risk as an event
State what may happen, the affected milestone or deliverable, evidence already visible, and the consequence if nothing changes. Avoid vague labels such as high risk without a trigger.
Separate mitigation from decision
A coordinator can record a mitigation task and track its due date. Scope changes, acceptance of exposure, and resource commitments stay with the project owner.
Age the unresolved items
Review risk age, last evidence, next checkpoint, and overdue action. Close a risk only when the owner confirms the trigger is gone or the issue has been moved into an accepted decision.