M07 Risk

Builds a register of up to twenty risks with owners, ratings and treatments. Cyber, IP and foreign-interference entries are mandatory.

Builds a register of up to twenty risks with owners, ratings and treatments. Cyber, IP and foreign-interference entries are mandatory.

• Frameworks: ISO 31000:2018; 5×5 likelihood–consequence matrix; COSO ERM categories.
• Who completes it: Company Administrator and Managers. Cadence: six-monthly. Estimated time: about 35 minutes.
• Feeds: the Risk Analysis widget.
• Agent sources: see "Module agents and evidence"; anything the agent proposes is confirmed by you before it counts.

Related topics

• Completing an instrument Pages of items with Previous, Next and Save and exit; structured grids; agent pre-fill you confirm, correct or reject.
• Module agents and evidence Each module has an agent that gathers public evidence through an allow-listed proxy; nothing affects a score unless you confirm it.
• Risk Analysis widget 5×5 heat map. ISO 31000, COSO ERM.

Pages where this applies: /modules/M07