Cushion · What you can absorb · 4 min read

What is the National Risk Register?

Written by Jon Blades Independent review pending Last reviewed 30 August 2026

The National Risk Register is the government's public assessment of the most serious risks facing the UK, published by the Cabinet Office. The 2026 edition appeared on 14 July 2026 and scores each risk for likelihood and impact (GOV.UK, checked 30 August 2026). It is written for planners rather than to alarm households.

The slightly longer answer

In the government’s own words, “the National Risk Register (NRR) is the external version of the National Security Risk Assessment (NSRA), which is the government’s assessment of the most serious risks facing the UK” (GOV.UK, checked 30 August 2026). The register is the published version of that assessment, free to download, and anyone can read it.

The Cabinet Office publishes it. The 2026 edition came out on 14 July 2026 and was last updated on 12 August 2026, running to 223 pages with a 27-page plain-language guide alongside it (GOV.UK, checked 30 August 2026). There is no fixed timetable: the accompanying guide says the register “is updated at appropriate intervals to ensure that planners are able to work with the latest data” (checked 30 August 2026).

Each risk is plotted on two scales. Likelihood is “the chance of a risk occurring within a set timeframe”, assessed over the next five years for non-malicious risks and two years for malicious ones such as cyber attacks, in five bands from under 0.2 per cent to over 25 per cent. Impact is “the scale of potential harm”, scored one to five across seven dimensions: human welfare, essential services, economic, behavioural, security, international order and environmental (Guide to the 2026 National Risk Register, checked 30 August 2026). Planning is built on a “reasonable worst-case scenario”, which the guide defines as “the worst plausible version of a risk, after excluding highly unlikely extremes”.

What should a household take from it? Mostly the structure, not the list. The guide’s own logic is that “we cannot perfectly predict how risks will unfold”, so the UK “prepares for the common consequences that many risks share, such as disruption to essential services and potential human health impacts, regardless of their cause” (checked 30 August 2026). That is the same reasoning behind a home emergency kit: water, light, warmth and a way to charge a phone cover a dozen different causes.

The register is explicit about where households should go next. It is “aimed at risk and resilience practitioners, including businesses and voluntary and community sector organisations” (GOV.UK, checked 30 August 2026), and both it and its guide send everyone else elsewhere: “Information for individuals, households and communities on preparing for emergencies can be found on GOV.UK/Prepare”, and “For further guidance, resources, and advice on bolstering personal and household readiness, visit the Prepare website.” If you want the register’s civil-emergency entries in plain English, see conflict and civil emergencies.

Who writes the National Risk Register?

The Cabinet Office publishes it, drawing on the National Security Risk Assessment. Risks are “reviewed by panels of experts from industry, local level, charities and academia, as well as subject matter experts within government”, which the guide says is a deliberate step to avoid groupthink (Guide to the 2026 National Risk Register, checked 30 August 2026).

How often is it updated?

There is no fixed cycle. The 2026 guide says the register “is updated at appropriate intervals to ensure that planners are able to work with the latest data”. GOV.UK shows the previous editions published on 3 August 2023 and 16 January 2025, and this one on 14 July 2026 (checked 30 August 2026).

What is a reasonable worst-case scenario?

The planning yardstick used throughout the register. The guide defines it as “the worst plausible version of a risk, after excluding highly unlikely extremes”, and says using it “allows for preparations that are both proportionate and effective” (checked 30 August 2026). It is not a prediction, and it is not the most likely outcome.

Is the National Risk Register something to worry about?

It is a planning document, written for professionals, and it reads like one. The government describes the approach as “transparent by default”, intended to inform “a national conversation about risks and preparedness” (Guide to the 2026 National Risk Register, checked 30 August 2026). Reading it tends to be steadying rather than the opposite.

Where can I read it?

Free, on GOV.UK. The 2026 register and its shorter companion guide are both published as PDFs on the National Risk Register 2026 page (checked 30 August 2026). The 27-page guide is the readable one if you want the shape without the full 223 pages.

Sources & review

  • Cabinet Office: National Risk Register 2026. Checked 30 August 2026. Published 14 July 2026, last updated 12 August 2026; the definition of the register as the external version of the National Security Risk Assessment; its intended audience; the document lengths.
  • Cabinet Office: A Guide to the 2026 National Risk Register (PDF). Checked 30 August 2026. The likelihood and impact scales and their time horizons, the seven impact dimensions, reasonable worst-case scenarios, expert challenge panels, updating at appropriate intervals, planning for common consequences, and the signpost to the Prepare website.
  • Cabinet Office: National Risk Register 2025 and National Risk Register 2023. Checked 30 August 2026. The publication dates of the two previous editions, 16 January 2025 and 3 August 2023.
  • UK Government, Prepare campaign: Get prepared for emergencies. Checked 30 August 2026. The household guidance the register’s own guide points readers towards.

Awaiting editorial review (reviewedBy: TBC).