The risks of any area in one register: rated, with an action, an owner and a review date.
Includes: Risk heatmap (likelihood × impact)
Builds your risk register from the areas you choose (strategy, finance, operations, projects, people, legal, suppliers, technology and more), the risks you already know or an earlier assessment. Each risk gets a rating with its reason, a proposed action, an owner and a next review date. It stays editable, so the register follows the treatment and the reviews over time.
Any area
30 areas, from cash flow and projects to people, suppliers and technology, and any other you name.
Ready to act on
Each risk says why it has its rating and what to do next, with an owner and a review date.
Strategy and market, Governance and decisions, Reputation and communication, Cash flow and liquidity, Fraud and payments, Accounting and reporting, Service delivery and production, Quality and customer claims, Business continuity, Premises and equipment, Project delivery, Change and transformation, Recruitment and key people, Health and safety, Conduct and ethics, Employment law, Contracts and liability, Regulation and compliance, Personal data protection, Intellectual property, Suppliers and procurement, Customers and sales, Stock and logistics, Cyber security, IT systems and tools, Data and records, Use of artificial intelligence, Environment and sustainability, Natural events and climate, Economy and geopolitics
Data centres and server rooms, Servers and operating systems, Virtualisation platforms, Storage systems, Backup and recovery, Local and campus networks, Wide-area links and SD-WAN, Wireless networks, Firewalls and network perimeter, DNS and DHCP, VPN and remote access, Voice and telecoms, Public cloud (IaaS and PaaS), SaaS applications, Containers and Kubernetes, Identity and access management, Directory services (Active Directory, Entra ID), Privileged access, Secrets, certificates and service accounts, Laptops and workstations, Mobile devices and BYOD, Email and collaboration, Printers and peripherals, Business applications (ERP, CRM), Web applications and APIs, Software development, Build and deployment pipelines, Third-party and open-source components, Legacy and end-of-life systems, Databases, Data classification and leakage, Encryption and key management, Personal data processing, Data platforms and analytics, AI systems and models, Logging and security monitoring, Vulnerability and patch management, Malware and ransomware, Incident response, Security awareness, IT service and change management, Monitoring and capacity, Disaster recovery and IT continuity, IT asset management and licences, Automation and scripting, IT staff and key-person dependency, IT suppliers and supply chain, Managed service providers, Industrial control systems (OT/ICS), IoT and connected devices, Payment systems (card data), Medical devices and health systems, Branch offices and remote sites, Website and domain names
