Demo data · saved in this browser
Enterprise Risk Management
Risk Assessment
Run assessments on just the risks you choose. Survey results update the Risk Register only after a reviewer approves them.
1. Select risks→2. Launch assessment→3. Collect responses→4. Calculate scores→5. Review results→6. Approve assessment→7. Update Risk Register
1. Select risks
0 selected
Assessments
Steps 2–7 happen on the survey page for each assessment
Risk heatmaps
Axes are likelihood and impact. Hover for velocity and full scores. Click to open the risk. ↑↓ show change from the prior period.
Inherent · Current
Impact
12345
Likelihood
Residual · Current
Impact
12345
Likelihood
Inherent vs residual
How much existing controls reduce exposure · 62 risks
| Risk | L × I × V | Inherent | Controls | Factor | Residual | Reduction | Priority |
|---|---|---|---|---|---|---|---|
| Ransomware attack | 4 × 5 × 5 | 100 Critical | Moderate | ×0.6 | 60 ▲ | 40% | Critical |
| Data breach | 4 × 5 × 4 | 80 Critical | Moderate | ×0.6 | 48 ▲ | 40% | High |
| Stakeholder confidence deterioration | 3 × 5 × 5 | 75 Critical | Strong | ×0.4 | 30 – | 60% | Medium |
| Key employee turnover | 3 × 5 × 5 | 75 Critical | Strong | ×0.4 | 30 – | 60% | Medium |
| Personal data protection violations | 3 × 5 × 5 | 75 Critical | Very Strong | ×0.2 | 15 – | 80% | Medium |
| Supplier disruption | 4 × 4 × 4 | 64 Critical | Weak | ×0.8 | 51.2 – | 20% | High |
| Unauthorized access to financial systems | 4 × 4 × 4 | 64 Critical | Weak | ×0.8 | 51.2 ▲ | 20% | High |
| Failed strategic initiatives | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Business model disruption | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Brand damage | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Asset misappropriation | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Interest rate exposure | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Tax position challenge | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Unauthorized AI usage | 5 × 3 × 4 | 60 Critical | Ineffective | ×1 | 60 – | 0% | Critical |
| Litigation exposure | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Contractual noncompliance | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| Intellectual property infringement | 3 × 4 × 5 | 60 Critical | Very Strong | ×0.2 | 12 – | 80% | Low |
| M&A integration failure | 4 × 4 × 3 | 48 High | Weak | ×0.8 | 38.4 – | 20% | High |
| Vendor concentration | 4 × 4 × 3 | 48 High | Weak | ×0.8 | 38.4 – | 20% | High |
| AI governance failure | 4 × 4 × 3 | 48 High | Ineffective | ×1 | 48 ▼ | 0% | High |
| Financial statement misstatement | 3 × 5 × 3 | 45 High | Very Strong | ×0.2 | 9 ▼ | 80% | Low |
| Export control violations | 3 × 5 × 3 | 45 High | Moderate | ×0.6 | 27 – | 40% | Medium |
| Revenue recognition errors | 3 × 4 × 3 | 36 High | Strong | ×0.4 | 14.4 ▼ | 60% | Low |
| Foreign exchange exposure | 4 × 3 × 3 | 36 High | Strong | ×0.4 | 14.4 – | 60% | Low |
| Competitive disruption | 2 × 4 × 4 | 32 Medium | Ineffective | ×1 | 32 ▼ | 0% | Medium |
| Changing customer preferences | 2 × 4 × 4 | 32 Medium | Ineffective | ×1 | 32 ▼ | 0% | Medium |
| Pricing pressure from low-cost entrants | 2 × 4 × 4 | 32 Medium | Very Strong | ×0.2 | 6.4 – | 80% | Low |
| Inadequate access to capital | 2 × 4 × 4 | 32 Medium | Ineffective | ×1 | 32 ▼ | 0% | Medium |
| Financial fraud | 2 × 4 × 4 | 32 Medium | Very Strong | ×0.2 | 6.4 – | 80% | Low |
| Regulatory violations | 2 × 4 × 4 | 32 Medium | Ineffective | ×1 | 32 ▼ | 0% | Medium |
| Failure to comply with new regulations | 2 × 4 × 4 | 32 Medium | Ineffective | ×1 | 32 – | 0% | Medium |
| Loss of market share | 2 × 3 × 4 | 24 Medium | Ineffective | ×1 | 24 ▼ | 0% | Medium |
| Inaccurate financial disclosures | 2 × 3 × 4 | 24 Medium | Ineffective | ×1 | 24 ▼ | 0% | Medium |
| Cash flow shortage | 2 × 3 × 4 | 24 Medium | Ineffective | ×1 | 24 ▼ | 0% | Medium |
| Talent shortages | 4 × 3 × 2 | 24 Medium | Weak | ×0.8 | 19.2 – | 20% | Medium |
| AI model errors | 2 × 3 × 4 | 24 Medium | Ineffective | ×1 | 24 ▼ | 0% | Medium |
| ESG commitments not met | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Logistics interruption | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Semiconductor component shortage | 4 × 5 × 1 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Operational disruption | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Disaster recovery failure | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Manufacturing plant outage | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Workplace injuries | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Employee safety incidents | 5 × 2 × 2 | 20 Medium | Weak | ×0.8 | 16 ▲ | 20% | Medium |
| Employee misconduct | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Workforce disruption | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Labor relations dispute | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Poor employee engagement | 4 × 5 × 1 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Leadership succession failure | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Third-party cyber exposure | 5 × 2 × 2 | 20 Medium | Moderate | ×0.6 | 12 ▲ | 40% | Low |
| Cross-border data transfer noncompliance | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Bribery and corruption | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Conflicts of interest | 4 × 5 × 1 | 20 Medium | Strong | ×0.4 | 8 – | 60% | Low |
| Third-party compliance failure | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| Product defects and recalls | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| Warranty cost escalation | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| IT infrastructure failure | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| ERP modernization delay | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| Data integrity failure | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 – | 20% | Low |
| Unauthorized data disclosure | 1 × 3 × 3 | 9 Low | Weak | ×0.8 | 7.2 ▼ | 20% | Low |
| Vendor performance failure | 1 × 2 × 3 | 6 Low | Weak | ×0.8 | 4.8 – | 20% | Low |
| System outage | 1 × 2 × 3 | 6 Low | Weak | ×0.8 | 4.8 – | 20% | Low |