The risks of any area, chosen by you, rated with the reason for each rating.
Includes: Risk heatmap (likelihood × impact)
Assesses the risks you choose in any area, from strategy, finance and suppliers to people, compliance and technology, where IT goes down to 54 domains; or those of a risk identification you select. Each risk is rated for likelihood and impact from a reference rating, adjusted to your situation and measures in place, with the reason written beside it; a risk you write yourself is rated from its facts. The level is calculated, never guessed. Risk owners decide what to accept.
Any area
Strategy, finance, operations, people, compliance, suppliers and technology, down to 54 IT domains.
Reasoned ratings
Each rating says why, from your situation, data and measures in place.
Strategy and market, Governance and decisions, Reputation and communication, Cash flow and liquidity, Fraud and payments, Accounting and reporting, Service delivery and production, Quality and customer claims, Business continuity, Premises and equipment, Project delivery, Change and transformation, Recruitment and key people, Health and safety, Conduct and ethics, Employment law, Contracts and liability, Regulation and compliance, Personal data protection, Intellectual property, Suppliers and procurement, Customers and sales, Stock and logistics, Cyber security, IT systems and tools, Data and records, Use of artificial intelligence, Environment and sustainability, Natural events and climate, Economy and geopolitics
Data centres and server rooms, Servers and operating systems, Virtualisation platforms, Storage systems, Backup and recovery, Local and campus networks, Wide-area links and SD-WAN, Wireless networks, Firewalls and network perimeter, DNS and DHCP, VPN and remote access, Voice and telecoms, Public cloud (IaaS and PaaS), SaaS applications, Containers and Kubernetes, Identity and access management, Directory services (Active Directory, Entra ID), Privileged access, Secrets, certificates and service accounts, Laptops and workstations, Mobile devices and BYOD, Email and collaboration, Printers and peripherals, Business applications (ERP, CRM), Web applications and APIs, Software development, Build and deployment pipelines, Third-party and open-source components, Legacy and end-of-life systems, Databases, Data classification and leakage, Encryption and key management, Personal data processing, Data platforms and analytics, AI systems and models, Logging and security monitoring, Vulnerability and patch management, Malware and ransomware, Incident response, Security awareness, IT service and change management, Monitoring and capacity, Disaster recovery and IT continuity, IT asset management and licences, Automation and scripting, IT staff and key-person dependency, IT suppliers and supply chain, Managed service providers, Industrial control systems (OT/ICS), IoT and connected devices, Payment systems (card data), Medical devices and health systems, Branch offices and remote sites, Website and domain names
