The risks of any area, chosen by you, ready to be rated.
For any area, from strategy, finance and suppliers to people, safety, compliance and technology: each area you tick lists its risks for you to choose, and you add your own. Each risk states its source, what it affects, its possible causes, its consequence, the measures you already have against it and its owner. Nothing is assumed and nothing is rated: the list is ready for the risk assessment.
Any area
Strategy, finance, operations, people, safety, compliance, suppliers and technology.
Chosen by you
Each area lists its risks: you keep those that concern you and add your own.
Complete
Source, what it affects, causes, consequence, measures in place and owner.
Strategy and market, Governance and decisions, Reputation and communication, Cash flow and liquidity, Fraud and payments, Accounting and reporting, Service delivery and production, Quality and customer claims, Business continuity, Premises and equipment, Project delivery, Change and transformation, Recruitment and key people, Health and safety, Conduct and ethics, Employment law, Contracts and liability, Regulation and compliance, Personal data protection, Intellectual property, Suppliers and procurement, Customers and sales, Stock and logistics, Cyber security, IT systems and tools, Data and records, Use of artificial intelligence, Environment and sustainability, Natural events and climate, Economy and geopolitics
Data centres and server rooms, Servers and operating systems, Virtualisation platforms, Storage systems, Backup and recovery, Local and campus networks, Wide-area links and SD-WAN, Wireless networks, Firewalls and network perimeter, DNS and DHCP, VPN and remote access, Voice and telecoms, Public cloud (IaaS and PaaS), SaaS applications, Containers and Kubernetes, Identity and access management, Directory services (Active Directory, Entra ID), Privileged access, Secrets, certificates and service accounts, Laptops and workstations, Mobile devices and BYOD, Email and collaboration, Printers and peripherals, Business applications (ERP, CRM), Web applications and APIs, Software development, Build and deployment pipelines, Third-party and open-source components, Legacy and end-of-life systems, Databases, Data classification and leakage, Encryption and key management, Personal data processing, Data platforms and analytics, AI systems and models, Logging and security monitoring, Vulnerability and patch management, Malware and ransomware, Incident response, Security awareness, IT service and change management, Monitoring and capacity, Disaster recovery and IT continuity, IT asset management and licences, Automation and scripting, IT staff and key-person dependency, IT suppliers and supply chain, Managed service providers, Industrial control systems (OT/ICS), IoT and connected devices, Payment systems (card data), Medical devices and health systems, Branch offices and remote sites, Website and domain names
