ProductsModulesPricingBlogAbout PL Log in See demo
Module / Risk Engine

Assets, threats and vulnerabilities in one place.

ISO 27005, NIST SP 800-30 or a custom scale configuration. Likelihood x impact, treatment plan, acceptance or remediation. Residual risk calculated after ISMS controls are applied.

01 / Asset register

Information assets grouped by class with an assigned owner.

Any ICT system, database, business process or vendor can be an asset. CIA classification (confidentiality, integrity, availability), valuation (CAPEX/OPEX/reputational loss), and linkage to processes and regulations.

  • CIAScale 1-5 for each dimension
  • VALUEFinancial value + reputational impact
  • OWNERRisk owner + asset owner (separate roles)
02 / Threat & vulnerability catalog

Catalogs instead of starting from scratch.

Threat catalog drawn from established standards (ISO 27005 Annex C, BSI IT-Grundschutz). Vulnerability catalog with CVE feed for ICT systems. You map threat to vulnerability to asset once; subsequent updates are incremental.

03 / Heatmap + KRI

Board-level decisions, not spreadsheet-level ones.

A 5x5 heatmap with drill-down to the risk list. KRI (Key Risk Indicator) with thresholds; a breach generates a signal in the Signal Engine. Risk treatment plan with deadline, attached evidence and acceptance status.

FAQ

Najczęstsze pytania

ISO 27005, NIST SP 800-30 or a custom scale configuration. The default is a 5x5 assessment (likelihood times impact) on information assets, with threat and vulnerability catalogs.
The risk that remains after controls have been applied. Risk Engine recalculates it automatically once controls from the ISMS are in place, so the picture is always current rather than months out of date.
Key Risk Indicators with defined thresholds. When a threshold is breached, a signal is generated in the Signal Engine, so you know about rising risk before it becomes an incident.
Yes. The scale, criteria and thresholds are configurable. You can follow the standard or tailor the model to your organisation.

See Risk Engine
live.

30 minutes, demo on real data.

Umów demo →