Compliance posture
Compliance trend
Compliance %Open risks
Risk heat map
Severe
Major
Moderate
Minor
Trivial
Rare
Unlikely
Possible
Likely
Almost cert.
Likelihood →↑ Impact
Risk by category
Framework readiness
Recent activity
audit logOverdue reviews breakdown
Assets by classification
Assets by criticality
Module 6 · Enterprise Risk Management
Risk register
Multi-select filters, customizable columns. Click a heat map cell to filter by matrix position.
Residual heat map
5
4
3
2
1
1
2
3
4
5
Likelihood →↑ Impact
Risk appetite & distribution
Module 5b · Risk Treatment Plans
Treatment plans
End-to-end treatment workflow: Identification → Decision → Planning → Approval → Implementation → Validation → Closure
Centralized Task Management
Tasks
Every task across Risks and Controls, in one place — filter, sort, and update without opening each item individually.
Module 4 · Framework Management
Compliance frameworks
One control can satisfy many frameworks — mappings shown per control.
Module 5 · Controls Library
Controls library
Central repository — each control maps to frameworks, risks, assets and policies.
Compliance · Clauses
Management system clauses
Governance and process requirements from ISO-family standards (clauses 4–10) — separate from Annex A controls. Loaded per framework from each framework's own page.
Module 7 · Asset Inventory
Asset inventory
Hardware, software, cloud, information and people assets with CIA ratings.
Modules 8–9 · Documents & Policy Management
Policies & documents
Draft → Review → Approve → Publish → Acknowledge → Periodic review.
Compliance Calendar
Calendar
Everything due across risks, controls, clauses, policies, training, vendors — plus your own activities.
Governance · Training
My training
Training assigned to you. Complete the material and pass the quiz to mark it done.
Governance · Training Administration
Training administration
Create training modules, upload material, build the quiz, and assign to your team. Organization Administrator only.
Module 10 · Trust Vault
Trust Vault
Encrypted evidence store with framework, risk and control mapping. All access logged.
Module 11 · Workflow Engine
My approvals
Sequential, parallel and conditional flows with SLA tracking. Decisions are written to the audit log.
Module 1 · Multi-Tenant Management · Service Provider Console
Customer tenants
Onboard customers, assign frameworks and modules, manage tenant users. Every record carries a tenant key; the API enforces isolation on every query.
Vendor Risk Assessment
Vendor management
Assess, monitor, and manage cybersecurity risks from third-party vendors.
Vendor Risk Assessment · Vendor Inventory
Vendor inventory
The complete master list of every vendor — searchable, filterable, with customizable columns and bulk import/export.
Vendor Risk Assessment · Assessments
Vendor assessments
Questionnaire lifecycle: Send → Complete → Review → Score → Risk Rating
Vendor Risk Assessment · Templates
Assessment templates
Build the questionnaires sent to vendors. Section and question weights are shown as a running total but don't need to add up to 100 — flexible by design.
Administration · User Management
Users
Showing users for — only. Switch company using the selector at the top to manage a different company's users.
Administration · Roles & Permissions
Roles & permissions
Define granular access at module, framework, and control levels.
Administration · Organization Settings
Organization settings
Configure risk categories, departments, the risk matrix, and identity provider integrations for your organization.
Risk categories
Categories available when creating or editing a risk. Add as many as your organization needs.
Departments
Departments available for risk ownership and asset assignment.
Risk matrix
Configure the matrix size used for inherent and residual risk scoring across your organization. Existing risk scores are preserved when you change this.
Preview
Administration · Terms & Conditions
Terms & Conditions
Manage the platform-wide Terms & Conditions and Privacy Notice, and review who has accepted which version. Super Administrator only.
Administration · Audit Log
Audit log
A complete, immutable record of every create, update, delete, and approval action across your organization.