Risk Management
Identify, assess, treat and monitor risk across every domain: the risk register, KRIs, ICT assets, controls, risk appetite and board reporting.
Risk Management Overview
The Risk Management module provides a comprehensive framework for identifying, assessing, treating, and monitoring risks across every domain the organisation owns - ICT and cyber...
Set up with AI: your first registers
Answer ten questions about your business and get a draft risk register, KRIs, third parties, ICT assets and first actions to review before anything is created.
Risk Register & Assessing Risks
Filter the ICT risk register by category, status and owner, then create or edit a risk with its likelihood by impact score, treatment and lifecycle stage.
ICT Asset Management
The ICT Asset Management module maintains a comprehensive inventory of all ICT assets supporting your organization's critical and important functions. This inventory is a core...
ICT Controls
The ICT Controls module manages the catalog of technical, organizational, and procedural controls your organization has implemented to mitigate ICT risks. Controls map directly to...
Key Risk Indicators (KRIs)
Key Risk Indicators are the quantitative early-warning signals that sit alongside the risk register. While a risk describes a possible scenario, a KRI is the measurement that...
KRI Autopilot: automatic measurements
KRI Autopilot asks each indicator owner for the value once a reporting period closes, reminds once, and records the result against thresholds.
Risk Snapshots & Board Pack
A risk snapshot is a point-in-time capture of your whole risk posture, taken for year-over-year comparison. Each snapshot records the risk register (with the count of risks by...
Risk Appetite Settings
The Risk Appetite Settings page allows your organisation to define how much ICT risk it is willing to accept, configure the score thresholds that trigger treatment or escalation,...
Issues & Remediation Actions
The Issues register is where you record control weaknesses, audit findings, and other shortcomings that must be tracked to closure, together with the remediation actions taken to...