Which is recorded in the ‘risk register’?