Issue Log

An issue is

an event which has already occurred and has an impact on organizational objectives, whereas a risk is an uncertain future event

Similar to a risk, which is assessed a response strategy is chosen, an issue also needs management attention and decision or response has to be made to address the issue.

Some of the differences between and an issue and a risk is in the table below:

	Issue	Risk
Focus	Present	Future
Type	Negative	Positive (opportunity) or Negative (threat)
Repository	Issue Log	Risk Register
Response	Address the issue Work around	Risk Strategy e.g. accept, transfer, avoid, mitigate
Example	Vendor has demanded software audit	Vendor may demand a software audit
Example	Regulator has changed the guidelines	Regulations may change