Enterprise risk, governed through configurable scoring
Build and manage your risk register in one place, starting from existing Excel files or from a customised risk framework.
Overview
A risk register connected to everything it depends on
Assess each risk by likelihood, impact, residual risk, category and status, then connect it to controls, findings, vulnerabilities and other platform objects.
Adapt the risk matrix to your methodology, whether 5x5, 4x4 or 3x3, and monitor open risks, risk distribution and risk appetite through dedicated dashboards.
Challenge and solution
Risks are scored in isolation, with no link to the controls that mitigate them or the findings that raised them, and the matrix rarely matches the methodology management signed off.
Import the register you have, choose the matrix that matches your methodology, and connect every risk to the controls, assets, vendors and findings that change its residual score.
Features
What the Risk module includes
Risk register
Import from Excel or start from a customised risk framework, with categories, owners and status.
Configurable matrix
5x5, 4x4 or 3x3 likelihood and impact scales, adapted to your methodology.
Inherent and residual scoring
Score likelihood and impact, apply treatments and track residual risk over time.
Linked objects
Connect each risk to controls, findings, vulnerabilities, assets and vendors.
Risk appetite
Define appetite thresholds and see which open risks sit outside them.
Dashboards
Open risks, distribution by category and appetite in dedicated views for management.
See ResilientX GRC in action
Risk module FAQ
Can we keep our existing risk methodology?
Yes. The matrix supports 5x5, 4x4 and 3x3 scales, and categories, scoring labels and appetite thresholds are configurable, so the register reflects the methodology you already use.
How are risks connected to controls?
Each risk can be linked to the controls that mitigate it, the findings or vulnerabilities that raised it, and the assets or vendors it concerns. Those links are visible from both sides.
Can we import our current register?
Yes. Risk registers can be imported from Excel files and mapped to the platform fields, then enriched with links and treatments over time.