FULL FEATURE LIST
Everything Included
Risk Register & Inventory
- Centralised Risk Register ? All Risks Across Departments & Projects
- Risk Entry with Title, Description, Category, Owner & Date Raised
- Risk Source & Trigger Identification (Internal / External)
- Risk Category Taxonomy ? Strategic, Operational, Financial, Compliance, Reputational
- Risk Hierarchy ? Enterprise, Department, Project & Process Level
- Risk Duplication Check & Merge for Overlapping Entries
- Risk Status Tracking ? Identified, Under Assessment, Mitigated, Closed
- Bulk Import of Risks from Excel / CSV Template
Risk Identification Techniques
- SWOT Analysis Template ? Strengths, Weaknesses, Opportunities, Threats
- PESTLE Analysis Framework ? Political, Economic, Social, Tech, Legal, Environmental
- Bow-tie Analysis ? Threat Sources, Top Event & Consequences
- Hazard & Operability Study (HAZOP) Log
- Brainstorming & Workshop Facilitation Record
- Risk Prompt List & Industry-specific Risk Library
- Root Cause Analysis (RCA) Linkage to Identified Risks
- Opportunity Register ? Upside Risk Identification & Capture
Context Setting & Stakeholder Analysis
- Internal & External Context Definition (ISO 31000 Aligned)
- Organisational Objectives & Risk Appetite Statement Configuration
- Stakeholder Register ? Identification, Interest Level & Influence Mapping
- Risk Criteria Definition ? Likelihood & Consequence Scales
- Risk Tolerance & Appetite Thresholds per Category
- Scope of Risk Management Plan Documentation
- Legal, Regulatory & Contractual Obligation Register
- Context Review & Update Schedule
Risk Assessment & Scoring Matrix
- Configurable Likelihood Scale (3?3, 4?4, 5?5 Matrix)
- Consequence / Impact Scale ? Financial, Safety, Reputational, Operational
- Inherent Risk Score = Likelihood ? Consequence (Before Controls)
- Residual Risk Score = Likelihood ? Consequence (After Controls Applied)
- Colour-coded Risk Heat Map ? Green / Amber / Red / Dark Red
- Velocity & Detectability Dimensions (Optional Advanced Scoring)
- Multi-dimensional Impact Assessment Across Multiple Categories
- Risk Score History & Trend ? How Risk Has Changed Over Time
Qualitative & Quantitative Risk Analysis
- Qualitative Risk Scoring with Descriptive Likelihood & Impact Scales
- Quantitative Risk Analysis ? Expected Monetary Value (EMV) Calculation
- Monte Carlo Simulation for Probability Distribution of Risk Impact
- Sensitivity Analysis ? Tornado Chart Identification of Key Drivers
- Failure Mode & Effect Analysis (FMEA) ? RPN Calculation
- Fault Tree Analysis (FTA) ? Probability of Top Event Calculation
- Value at Risk (VaR) for Financial Risk Quantification
- Risk Aggregation ? Portfolio-level Combined Risk Exposure
Risk Prioritisation & Ranking
- Automatic Risk Priority Ranking by Risk Score
- Top 10 / Top 20 Critical Risks Dashboard
- Risk Comparison & Side-by-side Evaluation
- Risk Appetite Threshold Breach Alerting
- Escalation Rules ? Auto-escalate High & Critical Risks to Senior Management
- Risk Clustering by Category, Owner or Business Unit
- Strategic vs Operational Risk Separation & Prioritisation
- Executive Risk Summary ? Risks Above Tolerance Level
- Treatment Option Selection ? Avoid, Reduce, Share/Transfer, Accept
- Treatment Action Plan with Owner, Due Date & Resource Allocation
- Control Measure Documentation ? Preventive & Detective Controls
- Treatment Effectiveness Rating ? Reduces Likelihood, Impact or Both
- Residual Risk Calculation After Treatment Application
- Treatment Cost vs Risk Reduction Benefit Analysis
- Insurance & Risk Transfer Documentation Module
- Contingency Plan & Business Continuity Linkage
Control Library & Effectiveness Testing
- Enterprise Control Library ? Reusable Controls Mapped to Multiple Risks
- Control Type Classification ? Preventive, Detective, Corrective, Directive
- Control Owner Assignment & Accountability Tracking
- Control Design Effectiveness Assessment
- Control Operating Effectiveness Testing Schedule & Results
- Control Deficiency Log & Remediation Workflow
- Key Risk Indicator (KRI) Linkage to Control Performance
- Three Lines of Defence Model Mapping
Issue & Incident Management
- Incident Reporting Form ? Online Submission by Any Staff Member
- Incident Categorisation ? Near Miss, Incident, Non-conformance, Loss Event
- Incident Linkage to Risk Register ? Triggered Risk Materialisation
- Severity Assessment & Immediate Action Capture
- Root Cause Analysis (RCA) Workflow ? 5 Whys, Fishbone Diagram
- Corrective Action Plan with Owner & Due Date
- Incident Trend Analysis ? Frequency & Severity Over Time
- Regulatory Reportable Incident Flag & Notification Workflow
Key Risk Indicators (KRI) & Early Warning
- KRI Library ? Pre-built & Custom Indicators per Risk Category
- KRI Threshold Configuration ? Green / Amber / Red Alert Levels
- Automated KRI Data Feed from Business Systems (ERP, LIMS, Finance)
- KRI Dashboard ? Real-time Status of All Indicators
- KRI Breach Notification to Risk Owner & Senior Management
- KRI Trend Chart ? Historical Indicator Values Over Time
- KRI Review Schedule & Periodic Recalibration Workflow
- KRI vs Risk Score Correlation Analysis
Risk Review & Reassessment
- Periodic Risk Review Schedule ? Monthly, Quarterly, Annual
- Risk Owner Review Reminder & Confirmation Workflow
- Risk Score Reassessment & Change Justification Log
- New / Emerging Risk Identification During Review Cycle
- Review Meeting Minutes & Action Item Capture
- Risk Closure Process ? Evidence Upload & Approval Workflow
- Closed Risk Archive with Full Audit History
- Change Management Trigger ? Auto Risk Review on Major Organisational Change
Audit & Assurance Integration
- Internal Audit Plan Linkage to Risk Register
- Audit Finding & Observation Import into Risk System
- Risk-based Audit Universe ? Audit Priority from Risk Score
- External Audit & Regulatory Inspection Finding Management
- Assurance Map ? Who Provides Assurance on Each Risk
- Combined Assurance View Across Three Lines of Defence
- Audit Recommendation Follow-up & Status Tracking
- Regulatory Compliance Status Dashboard per Obligation
Risk Reporting & Dashboards
- Executive Risk Dashboard ? Portfolio Heat Map & Top Risk Summary
- Board / Committee Risk Report ? Automated PDF Generation
- Departmental Risk Report ? Risks Filtered by Business Unit
- Risk Trend Report ? How Portfolio Risk Has Changed Over Period
- KRI Status Report ? All Indicators with RAG Status
- Treatment Progress Report ? Open Actions & Overdue Items
- Incident Summary Report ? Frequency, Severity & Category Breakdown
- Scheduled Report Distribution to Stakeholders via Email
Heat Map & Visual Risk Analytics
- Interactive Risk Heat Map ? Click to Drill into Individual Risks
- Bubble Chart ? Risk Score, Velocity & Financial Exposure
- Risk Category Breakdown ? Pie & Bar Charts
- Inherent vs Residual Risk Scatter Plot
- Risk Trend Line ? Score Movement Over Time per Risk
- Geographic Risk Map ? Risks by Location / Region
- Risk Concentration Analysis by Owner, Department & Category
- Export All Charts to PDF, PNG & PowerPoint
Stakeholder Communication & Notifications
- Automated Notification ? New Risk Assigned to Owner
- Risk Score Change Alert to Owner & Manager
- KRI Threshold Breach Alert ? Email & In-app Notification
- Overdue Action Reminder & Escalation to Line Manager
- Risk Review Due Reminder ? Configurable Advance Notice
- New Incident Reported Notification to Risk Manager
- Board Meeting Risk Pack Auto-compilation & Distribution
- Custom Notification Rules per Risk Category & Severity
Compliance & Regulatory Obligation Register
- Regulatory Obligation Register ? Laws, Standards & Contractual Requirements
- Obligation Linkage to Business Processes & Risk Register
- Compliance Status Assessment ? Compliant, Partial, Non-compliant
- Compliance Gap Analysis & Remediation Action Plan
- Regulatory Change Monitoring & Impact Assessment Workflow
- ISO 31000, ISO 9001, ISO 45001 & Industry Framework Alignment
- Compliance Calendar ? Submission Deadlines & Reporting Dates
- Regulatory Authority Correspondence & Evidence Log
Risk Policy, Framework & Governance
- Risk Management Policy & Framework Document Control
- Risk Appetite Statement ? Board-approved Thresholds per Category
- Governance Structure ? Risk Committee, Champions & Owner Register
- Role-based Responsibilities ? RACI Matrix for Risk Management
- Risk Management Maturity Assessment & Improvement Roadmap
- Annual Risk Management Programme Calendar
- Risk Training Register ? Staff Completion & Certification Tracking
- Management Review of Risk Framework Effectiveness
- Project Risk Register ? Linked to Project / Programme Record
- Project Risk Assessment at Initiation, Planning & Execution Gates
- Schedule Risk Analysis ? Delay Probability & Critical Path Impact
- Cost Risk Analysis ? Budget Overrun Probability & Contingency Reserve
- Risk Response Plan Tracking ? Avoid, Mitigate, Transfer, Accept
- Lessons Learned ? Risk Outcomes Captured at Project Close
- Programme Risk Aggregation ? All Projects in One Portfolio View
- Project Risk Report for Steering Committee & Sponsors
Supply Chain & Third-party Risk
- Supplier & Vendor Risk Register ? Criticality & Dependency Assessment
- Third-party Due Diligence Questionnaire & Scoring
- Supplier Financial Stability, Compliance & Geopolitical Risk Rating
- Supply Chain Disruption Scenario Modelling
- Supplier Concentration Risk ? Single Source Dependency Alert
- Contract Risk Review ? Liability, Indemnity & Force Majeure Clauses
- Supplier Performance KRI Dashboard
- Corrective Action & Improvement Plan for High-risk Suppliers
Business Continuity & Crisis Management
- Business Impact Analysis (BIA) ? Critical Process & Recovery Time Objectives
- Business Continuity Plan (BCP) Documentation & Version Control
- Crisis Management Plan & Command Structure
- BCP Exercise & Drill Schedule, Results & Lessons Learned
- Recovery Strategy Documentation ? Manual Workarounds & Alternate Sites
- Dependency Map ? People, Systems, Suppliers & Infrastructure
- Crisis Communication Plan ? Internal & External Stakeholder Templates
- BCP Maturity Assessment & ISO 22301 Alignment
System Configuration & Administration
- Role-based Access Control ? Risk Manager, Owner, Reviewer, Viewer, Admin
- Organisational Structure ? Business Unit, Department & Entity Hierarchy
- Risk Matrix & Scoring Scale Customisation
- Custom Risk Categories, Fields & Workflows
- ERP, LIMS & GRC System Integration via REST API
- SSO / Active Directory & SAML 2.0 Authentication
- Immutable Audit Trail ? All Changes Logged with User & Timestamp
- Data Backup, Retention Policy & Disaster Recovery SLA
Document Control & Audit Trail
- Risk-related Document Repository ? Policies, Plans, Evidence
- Version Control & Approval Workflow for All Documents
- Evidence Attachment to Risks, Controls, Actions & Incidents
- Full System Audit Trail ? Every Create, Edit & Delete Action Logged
- User Activity Log ? Login, Logout & Data Access Tracking
- Data Export ? Full Risk Register to Excel, PDF & CSV
- GDPR / Data Protection Compliant Data Handling
- Record Retention Policy with Automated Archiving
