Enterprise Risk Register

The Risk Register is a board-level view: strategic, operational, regulatory, technical, and AI-safety risks, scored on a standard five by five likelihood and impact matrix and tracked through to treatment.

Add a risk and rate its likelihood and impact from one to five each. The score and risk level update live as you pick, so you can see exactly how a risk lands on the heatmap before you save it.

Every open risk lands in its cell on the five by five heatmap, color-coded from low to critical. Click any cell to instantly filter the register table below to just the risks sitting at that exact coordinate.

Choose a treatment strategy, then re-score likelihood and impact after mitigation to record the residual risk. The Risk Reduction Index on the summary compares average inherent to residual score across every mitigated risk, so a board can see the treatment programme is actually working.

Attach an existing Compliance Plans task as the risk's remediation. That proves the risk has a real owner and deadline, and gives you a direct link from the register straight to that task on the Gantt roadmap.

This is a general enterprise register, not a replacement for a system's EU AI Act risk classification, which is a separate, specific regulatory determination under Article 6. The two are complementary: one tells you whether a system's use case triggers legal obligations, the other tells you which risks, across the whole organisation, actually deserve attention first.