A risk register that rates the same way twice.

Most risk registers are a table of words with two numbers bolted on the end, and the numbers mean whatever the person filling them in felt that morning. Run the same site past two assessors and you get two different answers, which is precisely the situation a register is supposed to prevent.

The Risk Tool keeps the words — location, hazard, what the risk is, who it affects and how, what you already do about it, who owns the action and by when — and puts a consistent rating underneath them. Inherent and residual sit side by side, so the register shows what the controls are actually buying rather than just asserting that they help.

Ratings are produced by the PillarsCore method and reported as bands. The tool supports professional judgement — it does not replace the assessor, and the assessor remains accountable for the assessment.

The survey

The survey walks a site through six questions in the order an incident asks them. Strong on one and thin on the next is the usual pattern, and it is the one a register full of separate rows will not show you. Held against the same site, in the same record, the shape of the gap becomes visible.

Deter — Would an attempt start here at all?
Detect — Would you know it had started?
Delay — How long do you have before it lands?
Deny — Can it reach the thing that matters?
Respond — Who moves, how fast, with what?
Recover — How long until you are working again?

Six domains, one site, one record. Strong in one and thin in the next is the shape most sites are actually in.

What the tool records

A worded risk register with the columns a real assessment needs: location, hazard, what the risk is, who is affected and how, existing controls, further action, owner and deadline.
LICREPH rating applied consistently to every row, scored on the server and reported as a band.
Inherent and residual ratings side by side, so the register shows what the controls are actually buying.
Add your own columns, widen any column, and carry both through to the exported report.
The six-domain Security Survey and the risk register held against one site, in one record.
A branded PDF summary of the inputs and the resulting priorities.

Start the register.

30-day free trial, then £45.99 a year. The trial is the whole tool, not a cut-down version of it. No card is taken to start it, and nothing is charged unless you choose to subscribe at the end.

Sign in

Your assessments, your sites and your exported reports, held in one record.