Financial Model Risk Register Template
Executive Summary
Key Takeaways
- ✓ A consolidated risk register, spanning every workstream, is the single mechanism that confirms a due diligence finding actually reached a resolution rather than remaining documented only in its originating workstream's report.
- ✓ Every entry should be tracked to one of three resolution outcomes — a model adjustment, a contractual protection, or a documented risk acceptance — with no entry left open at the point of signing.
- ✓ The register should distinguish structural model risk from business and commercial risk explicitly, since the two require different resolution mechanisms and should never be reported or resolved as though they were the same category.
Purpose¶
Due diligence findings are typically generated by separate workstream teams, each maintaining its own report and findings log. This template consolidates every finding — model risk and business/commercial risk alike — into a single register, tracked through to a defined resolution, so nothing surfaced during diligence is silently lost between a workstream's report and the transaction's final terms.
Who Should Use This Template¶
- Deal teams coordinating a transaction across multiple due diligence workstreams.
- Investment committee secretariats confirming every material finding has reached a resolution before a decision is made.
- Advisory firms consolidating findings across a client's independent model review, lender review, and workstream-specific due diligence.
Template Structure¶
| Field | Description |
|---|---|
| Finding ID | A unique reference, sortable by workstream |
| Workstream | Financial, commercial, operational, technical, legal, tax, ESG, or model risk |
| Risk category | Structural model risk, or business/commercial risk — tracked explicitly and separately |
| Description | The specific finding, in enough detail to be independently understood without the source report |
| Materiality | An assessed severity or quantified financial exposure, where available |
| Resolution mechanism | Model adjustment, contractual protection, or documented risk acceptance |
| Resolution detail | The specific model line item, agreement clause, or acceptance decision reference |
| Status | Open or Resolved |
| Owner | Who is accountable for confirming the resolution is actually in place |
How to Use It¶
Populate the register throughout confirmatory diligence as each workstream generates findings, rather than compiling it only at the end of the process. Every entry should be assigned a resolution mechanism as soon as it is identified where possible, per the finding-to-resolution discipline described on Buy-Side Due Diligence. At the point a transaction is ready to sign, every entry should show a status of Resolved — an entry still marked Open represents an unresolved risk being taken on, whether knowingly or not.
Track structural model risk findings — sourced from an independent model review — using the same register but with the Risk Category field explicitly distinguishing them from business and commercial risk findings, so the two are never conflated when the register is reviewed by the investment committee.
Common Pitfalls¶
Compiling the register only at the end of the process. Populating it throughout confirmatory diligence, as findings are generated, catches an unresolved item early enough to actually address it before signing.
Leaving the resolution mechanism field blank. A finding without an assigned resolution mechanism is not tracked to closure — it is simply logged, which is not the same thing.
Conflating model risk and business risk in a single, undifferentiated list. The two require different resolution mechanisms and different owners, and blending them together in the register obscures which category any given open item actually belongs to.
Treating "documented risk acceptance" as a default for anything inconvenient to resolve. This resolution mechanism should reflect a genuine, considered decision, not a default used to close out an item that was simply difficult to quantify or negotiate.
Continue Reading¶
Related Pillars¶
Related Technical Guides¶
Related Checklists¶
Related Resources¶
How OXXON tests thisRun a free structural check with FMAE
Frequently Asked Questions
Why use a single, consolidated risk register instead of separate workstream logs?
Because separate, siloed logs make it difficult to confirm that every finding across every workstream has actually reached a resolution — a consolidated register is the single place a deal team or investment committee can check for open items across the entire transaction at once.
What are the three resolution outcomes every entry should be tracked to?
A specific, traceable model adjustment; a specific contractual protection (representation, warranty, indemnity, or purchase price adjustment mechanism); or an explicit, documented decision to accept the risk. An entry mapped to none of these has not actually been resolved.
Should structural model risk and business risk findings be entered in the same register?
They can be tracked in the same register, but should be explicitly categorized and distinguished within it — conflating the two obscures which resolution mechanism is appropriate and misrepresents what any given finding actually concerns.
When should the risk register be considered complete?
When every entry has a status of resolved (with its resolution mechanism specified) rather than open, at the point the transaction is ready to sign — an open entry at signing represents an unresolved, unaccepted risk still being taken on knowingly or unknowingly.
Who should maintain the risk register?
Typically the deal team lead or a designated due diligence coordinator, consolidating entries submitted by each workstream's specialist advisor, so a single owner is accountable for confirming completeness across the full transaction.
Related Articles
Financial Model Due Diligence
Financial model due diligence is the discipline of testing whether the financial model used to price, structure, or finance a transaction is itself structurally sound — a distinct question from whether the target business's historical financials are reliable (the domain of financial due diligence) or whether its commercial prospects are durable (commercial due diligence). A model can be structurally unsound — an untraceable synergy figure, a broken purchase price allocation link, a hardcoded override masking the true output of a formula — independent of whether the underlying business is fundamentally healthy, and this risk is what financial model due diligence is specifically built to catch. This page is the hub for the Knowledge Centre's model-risk-in-transactions content: how model review differs by audience (independent, lender, investor, vendor), how it differs from a quality of earnings review, and how transaction-specific model risk maps onto FMAE's own structural rule set.
Model Risk During Transactions
Model risk during a transaction concentrates in mechanics that do not exist in either party's ordinary-course, standalone model — purchase price allocation, financing structure, pro-forma consolidation, and synergy assumptions — each a new potential point of structural failure introduced specifically by the transaction itself. This guide maps where that risk concentrates and why it is structurally independent of whether the underlying business being acquired is fundamentally sound.
Financial Model Due Diligence Checklist
This checklist operationalizes the Financial Model Due Diligence pillar into a working review tool. It focuses on the checks specific to a transaction model that general model audit and the acquisition-model-specific checklist do not fully cover in combination — whether due diligence findings from every workstream are actually and correctly reflected in the model, and whether the review has been scoped correctly for its intended audience (independent, lender, investor, or vendor). It assumes the general Financial Model Audit Checklist and the Acquisition Model Checklist have already been applied to the underlying model structure.
Transaction Due Diligence Checklist
This checklist covers the full transaction due diligence process at the workstream and process level — financial, commercial, operational, technical, legal, tax, and ESG coverage, finding-to-resolution traceability, and the investment committee, lender, and independent assurance approval gates. It operates one level above the Financial Model Due Diligence Checklist, which covers the model-specific structural detail this checklist assumes is being separately applied wherever the transaction model itself needs review.