Platform · Risk
Your methodology, not a hardcoded formula
Enterprise, project or vendor-scoped registers with the same scoring engine underneath. The methodology is tenant configuration, not code.
Your scales, your thresholds
Likelihood and impact scales, banding and acceptance thresholds are configured per tenant. Keep the 5×5 your board already recognises.
Inherent to residual to target
The delta between inherent and residual risk is your risk programme's value, made visible per quarter. That is the number a budget conversation needs.
Linked, not listed
Risks link to the controls that mitigate them, the incidents that materialise them and the findings that confirm them. The register computes; the heatmap moves.
Residual risk, 5×5, your methodology
Illustrative, computed live per tenant in the platform.
Connected to
Frequently asked questions
Can we keep our existing 5×5 methodology?
Yes. Likelihood scales, impact scales, banding and thresholds are tenant configuration. If your board reports on a 5×5 with your definitions, the register runs exactly that.
How do vendor-scoped registers work?
Vendor risks live in their own register fed by third-party assessments, with the same scoring engine. Scores from completed assessments update the register automatically.