Register & scoring
Evidence-scored risk register
Rate risks against the BACKS and PPPT evidence dimensions. The engine derives PI, BI, GI and a certainty-weighted outcome score — no guesswork ratings.
Controls & compliance
Statement of Applicability
A live control library mapped to SACQS standards. Seed a sector and the register populates — controls stay "unknown" until real evidence lands.
Board lens
Certainty-weighted exposure
Strategic, ethical and compliance markers, financial exposure, and an AI-generated board narrative that leads with where you stand — not a wall of tables.
Treatment & action
Path to plan
Turn a flagged risk into a treatment plan with owned, tracked actions. Progress rolls up into the delivery tracker and back to the outcome score.
Assurance
Evidence-linked verification
Attach evidence to controls and actions. Content analysis modulates the suggested score, so the register reflects what's real — not what's claimed.
Indicators
Key risk indicators
Set KRI thresholds with the right breach direction and CBGRC alerts when a metric crosses the line — early, before it becomes an incident.