Risk
Register, score, treat, review
Risk register with inherent and residual scoring, treatment plans and scheduled reviews. Accepted risks carry an expiry date, so acceptance is never permanent by accident.
What it does
Built around the work, not the database
- Risk register with likelihood and impact scoring
- Inherent versus residual score after controls
- Treatment plans with owners and due dates
- Risk acceptances with approver and expiry
- Scheduled reviews and escalation paths
Works alongside
The rest of Governance
They resolve against the same org, so they agree on departments and people without an integration.