I have prepared the risk register for ISO 9001-2015 which includes only the probability and severity of the risk and mitigation plan, is that okay...
Separate names with a comma.