Every risk your organisation carries, in one register.
Strategic, financial, cyber and operational risks sit side by side, rated on your own matrix with appetite, key risk indicators and board reporting. Controls are listed in hierarchy order, critical controls are checked in the field, and cyber, privacy and quality frameworks install as rule sets beside safety.
Works on its ownEnterprise and cyber risk works on its own, so if it is all you need it is all you buy, and every other part of Obliwise stays optional.
What enterprise and cyber risk includes
Everything below comes with it, ready on the first day and yours to change. 21 capabilities
Enterprise risk management
Strategic, financial and compliance risks sit beside operational ones with appetite, key risk indicators and board reporting.
Your own risk matrix
Ratings use the matrix you already use, and different parts of the business can use different ones.
Critical control checks
People in the field check that critical controls are working, even offline, and the results colour the risk.
Standards and frameworks
ISO standards, cyber, privacy, quality and environmental frameworks install as rule sets alongside safety.
Risk register at every level
Risks are recorded at corporate, site, project and task level in one register.
Inherent, residual and target ratings
Each risk shows where it started, where it is now and where you want it.
Controls in hierarchy order
Controls are ranked by the hierarchy of control and linked to the risks they reduce.
Bow-tie diagrams
Major risks are drawn as bow ties with threats, consequences, barriers and how well each barrier works.
Risk assessments
Assessments are built to your format and completed in the field, feeding the register.
Corporate risks passed down
Corporate risks are passed down to sites and rolled back up, so everyone sees their share.
Risk register import
An existing risk register comes in from a spreadsheet with a template and a check before anything is saved.
Material unwanted events
A curated register of the events that could seriously harm the business, each tied to its critical controls.
Management of change
Changes to plant, process and people are assessed, approved and checked before and after they happen.
Change register tools
The change register has saved views, column choice, filter cards, bulk actions and export like every other register.
Quantified risk simulation
Enterprise risks are modelled with simulation to show the range of likely outcomes.
Legal register
The laws, codes and standards that apply to you are listed with what each requires.
Compliance at a glance
A posture view, a graph of what depends on what, and a point-in-time view show where you stand.
Reports and dashboards
Reports and dashboards are built from any module and shared by role.
Scheduled reports
Reports are sent to the right people on a schedule.
Audit program for the year
A yearly audit program schedules who audits what and tracks it to completion.
Conformance by clause
Audit results are tracked clause by clause against the standard you audit to.
Where it works
In the browser on any computer, and in these places too.
On the phone
In the iOS and Android apps, with or without signal.
- Critical control checks
- Risk register at every level
- Risk assessments
Worked example: the board asks about ransomware exposure
The audit and risk committee wants to know where the organisation stands.
Step 1: One risk, rated your way
The cyber risk sits in the corporate register with its inherent, residual and target ratings on your five by five matrix.
Step 2: Controls you can show
Backups, multi-factor sign-in and incident response are listed as controls, each with an owner and its last check.
Step 3: Passed down where it matters
The corporate risk is cascaded to each business unit, which records its own local controls against it.
Step 4: Reported to the board
The committee pack is produced on a schedule with the key risk indicators, the trend and any overdue control checks.
Read more
Module pages
Industries that use it
Start with enterprise and cyber risk on its own.
Tell us how many people and locations you have. We will set it up with you, using your own forms and terms, and you add anything else only if you want it.