Data with Sachin

What Is a RAID Log? RAID in Project Management Explained (With Template)

What RAID stands for in project management (Risks, Assumptions, Issues, Dependencies), how to create and use a RAID log, a ready-to-copy template, examples,…

In this article
  1. What does RAID stand for in project management?
  2. Risks vs issues: the key difference
  3. Why use a RAID log?
  4. What to include in a RAID log (fields)
  5. RAID log template (copy and use)
  6. How to create and run a RAID log
  7. RAID log best practices
  8. How to automate your RAID log with AI
  9. RAID log vs risk register vs issue log
  10. Frequently asked questions

A RAID log is a simple project management tool for tracking a project's Risks, Assumptions, Issues and Dependencies in one place. Some teams use the D for Decisions instead of (or as well as) Dependencies. Keeping these four things visible, owned and reviewed regularly helps project managers spot problems early, avoid surprises and keep stakeholders aligned.

Projects rarely fail because of the work everyone planned for. They fail because of the things nobody tracked: the risk that materialised, the assumption that turned out false, the issue that festered, the dependency on another team that slipped. A RAID log is a lightweight way to make those things visible. This guide explains what RAID stands for, how to build and run a RAID log, provides a template, and shows how to automate it.

What does RAID stand for in project management?

LetterStands forDefinitionExample
RRisksUncertain future events that could affect the project, positively or negatively"The vendor may not deliver the API on time."
AAssumptionsThings believed to be true for planning purposes, but not confirmed"Legal review will take no more than one week."
IIssuesProblems that are happening now and need resolution"The test environment is down, blocking QA."
DDependencies (or Decisions)Tasks or deliverables the project relies on (or decisions that have been made and why)"Data migration depends on IT completing the server upgrade."

Variations

  • RAID with Decisions: many teams track key decisions (what was decided, by whom, when, why) to avoid revisiting them.
  • RAAIDD or RAIDD: Risks, Assumptions, Actions, Issues, Dependencies, Decisions.
  • RAIDO: adds Opportunities.

Use whatever version suits your project, as long as it's consistent.

Risks vs issues: the key difference

  • A risk might happen in the future. You manage it by reducing its likelihood or impact.
  • An issue has happened. You manage it by resolving it.

If a risk materialises, it becomes an issue. A good RAID log shows when a risk was raised early and how it was handled, which is exactly the evidence that good project management happened.

Why use a RAID log?

  • Early warning: surfaces problems before they become crises
  • Accountability: every item has an owner and action
  • Shared visibility: stakeholders see the same picture
  • Better decisions: assumptions and dependencies are checked, not forgotten
  • Audit trail: a record of what was known, decided and done
  • Faster status reporting: the RAID log feeds directly into status updates

What to include in a RAID log (fields)

Common fields for all items

  • ID (e.g., R-01, A-03)
  • Type (Risk, Assumption, Issue, Dependency/Decision)
  • Description: clear and specific
  • Owner: one accountable person
  • Date raised
  • Status: Open, In progress, Closed (and for assumptions: Validated/Invalidated)
  • Due date / review date
  • Notes / updates

Additional fields by type

  • Risks: likelihood (1–5), impact (1–5), risk score (likelihood × impact), response strategy (avoid, reduce, transfer, accept), mitigation actions, trigger/early warning signs
  • Assumptions: how and when it will be validated; impact if wrong
  • Issues: priority/severity, impact, resolution actions, escalation level
  • Dependencies: what depends on what, the other team/supplier, required date, status
  • Decisions: decision made, alternatives considered, decision-maker, date, rationale

RAID log template (copy and use)

IDTypeDescriptionOwnerRaisedLikelihood (1–5)Impact (1–5)ScoreResponse / ActionDueStatus
R-01RiskVendor may deliver payments API latePriya3 Nov3515Weekly vendor check-in; build mock API for testing20 NovOpen
A-01AssumptionSecurity review takes ≤ 5 working daysTom3 Novn/a4n/aConfirm with security team this week7 NovOpen
I-01IssueStaging environment unavailable; QA blockedAna5 Novn/a4n/aEscalated to IT; temporary environment requested6 NovIn progress
D-01DependencyData migration requires server upgrade by ITRaj3 Novn/a5n/aUpgrade scheduled 15 Nov; confirm weekly15 NovOpen
DEC-01DecisionLaunch in two phases; EU after USSponsor4 Novn/an/an/aAgreed at steering meeting; reduces compliance riskn/aClosed

You can build this in Excel, Google Sheets, Smartsheet, Notion, Jira, Asana, Monday.com or Microsoft Lists. Most project tools let you create a RAID view with custom fields.

How to create and run a RAID log

1. Set it up at project kickoff

Create the log during planning. Run a short workshop with the team and key stakeholders: "What could go wrong? What are we assuming? What do we depend on? What's already a problem?"

2. Assign an owner to every item

Not the project manager by default: the person best placed to manage it.

3. Score and prioritise risks

Use likelihood × impact to focus on the risks that matter most. A simple heat map (high/medium/low) works well for stakeholders.

4. Review regularly

  • Weekly in team meetings for active projects
  • At every stage gate or steering committee
  • Whenever something changes significantly

5. Update, escalate and close

Update actions and statuses, escalate issues beyond the team's control, convert materialised risks to issues, validate or invalidate assumptions, and close items with a note on the outcome.

6. Use it in status reports

Summarise the top risks, open issues and critical dependencies in each status update.

7. Capture lessons learned

At project close, review the RAID log: which risks materialised, which assumptions were wrong, and what you'd do differently.

RAID log best practices

  • Be specific: "Possible delays" is useless; "Supplier X may miss the 20 Nov delivery due to capacity constraints" is actionable.
  • Keep it alive: a RAID log that isn't reviewed is worse than none; it creates false comfort.
  • Keep it simple: don't overload with fields nobody updates.
  • Make it visible: shared, not hidden in the PM's laptop.
  • Separate risks from issues clearly.
  • Track positive risks (opportunities) too, if useful.
  • Link items to tasks in your project tool so actions get done.

How to automate your RAID log with AI

Much RAID admin can now be automated:

  • Meeting capture: AI meeting assistants identify risks, issues, decisions and dependencies mentioned in meetings and add them to the RAID log for the PM to confirm.
  • Email and chat capture: an automation flags messages mentioning delays, blockers or decisions and drafts RAID entries.
  • Risk detection from project data: AI analyses task progress, overdue items and workloads to suggest new risks ("Testing is 40% behind plan; launch date at risk").
  • Review reminders: owners get automatic reminders before review dates.
  • Status report drafts: AI summarises top risks and issues weekly.
  • Escalation rules: high-score risks or overdue issues trigger alerts to sponsors.

Example workflow (n8n / Make / Zapier / Power Automate):

  1. Trigger: meeting transcript ready (Zoom/Teams/Meet).
  2. AI step: extract risks, assumptions, issues, dependencies and decisions as structured JSON with suggested owners.
  3. Add rows to the RAID sheet or project tool with status "Proposed".
  4. Notify the PM in Slack/Teams to approve.

(More: How to track tasks at work and How to automate tasks with AI.)

RAID log vs risk register vs issue log

ToolScope
Risk registerRisks only, usually with detailed analysis and responses
Issue logIssues only, with resolution tracking
RAID logCombines risks, assumptions, issues and dependencies (or decisions) in one place

Large or regulated projects may keep a separate, detailed risk register and a RAID log for day-to-day management.

Frequently asked questions

What is a RAID log?

A RAID log is a project management tool for tracking risks, assumptions, issues and dependencies (or decisions) in one place, each with an owner, status and actions, so problems are spotted and managed early.

What does RAID stand for in project management?

RAID stands for Risks, Assumptions, Issues and Dependencies. Some teams use D for Decisions, or track both.

What is the difference between a risk and an issue?

A risk is an uncertain event that might happen in the future; an issue is a problem that is happening now. When a risk materialises, it becomes an issue.

How often should a RAID log be reviewed?

Typically weekly for active projects, at major milestones or stage gates, and whenever significant changes occur.

Who owns the RAID log?

The project manager usually owns and maintains the RAID log overall, but each item should have its own owner responsible for managing it.

What tool should I use for a RAID log?

A spreadsheet (Excel or Google Sheets) works well for most projects. Project tools such as Jira, Asana, Monday.com, Smartsheet or Notion can host RAID logs with custom fields and link items to tasks.

Want this built for your business?

I design and build AI agents and automations that run in production, not just in demos. Tell me which process is eating your team's week.

Start a conversation
Sachin Rawat

Written by Sachin Rawat

AI & automation engineer · websites, apps and motion design

I build AI agents, automations, websites, apps and motion design for businesses. These guides answer the questions people actually search, written from hands-on experience building them.

Work with meMore stories

More from Sachin Rawat