• What happened
• How and why the risk occurrence came about
• What action has been taken (if any) in response
• The likelihood of the risk occurrence happening again
• Any additional responses or actions to be taken
• Key learning points and who they need to be communicated to
• Implement SMART actions
• Check actions are effective and meet its intended purpose
• Review actions continue to be effective