⚠️ Enterprise risk management
AI risk, in the same language as the rest of your register
Likelihood times impact. A named owner. A review date. Nothing exotic, because AI risk is not a separate discipline — it's a category you don't have entries for yet.
What you get
A register your auditor recognizes
ID
Risk
Level
R-014
Client data pasted into a public chatbot
High
R-021
Résumé screening tool ranks candidates unevenly
High
R-032
Vendor changed its model with no notice
Medium
R-038
Meeting-notes assistant retains recordings
Low
Sample rows. Placeholder for a real product screen.
How it fits what you already run
Beyond the register itself
Heat map
Likelihood against impact, so the board conversation is about the top-right corner and nothing else. Included on Pro.
Impact assessments
The evidence behind a rating: what the system does, who it affects, what you checked, and what you decided.
Incidents that close the loop
Every incident links back to the tool and the risk, so your register reflects what actually happened.
Board-ready output
A quarterly report with a maturity score and history, in the format directors are used to reading.
See where your register has gaps
The free Risk Readiness Scorecard takes ten minutes and ranks what to fix first.
Take the free scorecard →