The bid team lists what could go wrong: ground, weather, the price of steel. Two hours. Many sticky notes.
What could go wrong?
The back alley's bill so far: 39 weeks · See the bill
I can go wrong in plenty of ways: the wrong version, the wrong hands, the wrong place. Write those down like any other risk.
The wrong way
The register has one information risk. It says "IT failure". It's owned by "IT".
The register goes in with the bid. Nobody asks who'd notice an old drawing on site, or a sensitive one in the wrong inbox.
Tom (bid manager): Ground, weather, steel, IT. That's everything, surely.
An old drawing is used on site. It wasn't on the register, so nobody was watching for it.
Then a sensitive drawing is emailed to the wrong person. That wasn't on the register either.
Callum, the project manager, goes looking for the risk's owner.
Callum: Whose risk was this?
IT: Not ours. The server's fine.
One information risk on the register, owned by IT. Everything that went wrong was owned by nobody.
+2 weeks on the back alley's bill: Information risks nobody wrote down: two incidents, owned by nobody, with nothing ready.