Risk heat map (inherent)
Click a cell to filter the register.
Top risks
Vendors by residual tier
By category
| ID | Risk | Category | Owner | Inherent risk | Residual risk | Stage | Due |
|---|
| ID | Risk | Owner | Exception approved | Residual risk | Treatment | Next review |
|---|
| ID | Solution / technology | Risk owner | Outcome | Inherent | Residual | Status | Date |
|---|
| ID | Asset | Impact | Gaps | Managed | Residual | Status | Date |
|---|
| ID | Vendor | Criticality | NERC | CIP-013 | Data | Inherent | Controls | Residual | Next review | Status |
|---|
Inherent tier comes from criticality, data sensitivity and access. Residual tier lowers it by up to two levels based on the questionnaire score; a “No” on a key control keeps the vendor at Medium or above. Unanswered questions count as not demonstrated. Reviews are scheduled by inherent tier: Critical every 6 months, High 12, Medium 24, Low 36.
Ask the analyst
Company logo
Your organization's logo, shown in the top bar, on the dashboard, on the executive briefing and ad-hoc assessment PDFs, and on vendor questionnaires. PNG, JPG, WebP or SVG; a wide logo on a transparent or white background works best.
People directory
Your organization's people and reporting lines. Owner fields on risks and vendors are picked from this list and the workspace's members, and choosing a risk owner fills in their department, BU director and BU VP from their managers.
Columns: First name, Last name, Email, Title, Department, Phone, Manager email (the manager's name works too). Being in the directory doesn't give app access; use Invite to add someone as a member.
| Name | Department | Manager | App user |
|---|
AI settings
Your key is sent only to api.anthropic.com from this browser. Without “remember”, it is kept for this tab session only. Don't use this on a shared computer.
Data
Risks and vendors are stored locally in your browser (localStorage). Export regularly to back them up.