What you need to know

Module 2 audit always asks for the risk register. Empty or outdated registers are an instant minor non-conformity.