Glossary

RAID Log

A RAID log is a simple project-management tool that tracks four things in one place: Risks (what might go wrong), Assumptions (what you're taking as true), Issues (what has already gone wrong), and Dependencies (what you're relying on others for). It keeps the sources of drift visible and owned.

A RAID log is one of the most useful low-effort tools in project management. It is a single living list that captures four categories. The acronym is a standard project-management convention, used in structured methods such as PRINCE2 to keep the moving parts of a project visible in one register:

  • Risks — things that might go wrong, with a likelihood and an owner.
  • Assumptions — things you are currently treating as true. If an assumption turns out to be false, it usually becomes a risk or an issue.
  • Issues — things that have already gone wrong and need active management.
  • Dependencies — things you are relying on from other people, teams or suppliers, and the dates they're needed by.

Why it works

A RAID log earns its keep because it makes the usual sources of drift visible and assignable. Risks that live only in someone's head don't get managed; dependencies that aren't written down go silent until they bite. Putting all four in one place — each with an owner and a date — turns vague worry into trackable work.

Keeping one usefully

A RAID log is only valuable if it is reviewed on a cadence and each line has a named owner and a next date. A log that nobody opens is just a graveyard of old worries. The discipline is to walk it regularly and ask, for each line, "what's the next step, and who owns it?" — which is the same question that keeps any work under control.

Frequently asked

What does RAID stand for in a RAID log?
RAID stands for Risks, Assumptions, Issues and Dependencies. Risks are things that might go wrong, Assumptions are things you are treating as true, Issues are things that have already gone wrong, and Dependencies are things you are relying on from others. Keeping all four in one owned list is what makes the log useful.
What is the difference between a risk and an issue in a RAID log?
A risk is something that might happen in future and so carries a likelihood and a mitigation; an issue has already happened and needs active management now. The practical move is to watch for assumptions that turn out to be false, because they usually convert straight into a risk or an issue.
How often should you review a RAID log?
Review it on a fixed cadence — typically weekly, or at each project checkpoint — and walk every open line to confirm it still has a named owner and a next date. A RAID log that nobody opens is just a record of old worries; the review is what turns it into live control.

Related

← Back to the glossary