Skip to content

Risk register · Risk policy · Measures

RISK360

One risk register for the whole company

Strategic, financial, legal, supplier, operational, people and reputational risks in one place — rated on a single risk policy, with measures that become tasks in PM360.

The contact form opens on the home page.

AvailableRISK360 is part of MACONIA360. Access is enabled through a personal licensed seat. A personal licensed seat for BCM++ or INFOSEC360 also gives you access; no additional RISK360 seat is required. Later the register will also show the risks that arise in BCM++ and INFOSEC360.

What RISK360 does

One register, one scale, and measures somebody actually works on.

  • The register

    Risks across the whole company

    Strategic, financial, legal, supplier, operational, people and reputational risks, each with an identifier (R-001), an owner and a category. The categories can be extended, because no catalogue fits every organisation.

  • One risk policy

    Everything rated on the same scale

    Likelihood and impact come from the company's risk policy — one matrix, one acceptance threshold, one version. The same policy BCM++ and INFOSEC360 rate against.

  • Treatment

    How a risk is treated is derived, not set by hand

    Whether a risk is mitigated, accepted, avoided or transferred follows from its measures and its rating. An acceptance records the person and the time. It lapses when the risk is rated again.

  • Measures

    Every measure becomes a task in PM360

    With a target quarter and an owner; once the task is done, the register says so. After the quarter has ended, RISK360 asks the owner once whether the measure was really implemented.

  • Provenance

    Every rating keeps the scale it was made against

    Each rating carries the version of the risk policy it was made under. Changing the policy does not change an old rating retroactively.

Who this is for

For organisations that have to keep their risks in one place — not only the ones that fall out of a business impact analysis or an ISMS. Typically:

  • Risk owners and executives who need a register for the whole company, not one per department.
  • Organisations running BCM++ or INFOSEC360 that want their remaining risks rated on the same scale.
  • Groups with several legal entities that need a consolidated view across subsidiaries.

Your risks on one scale.

Create an account, or let us show you RISK360 in person — with your risk types and your risk policy.

The contact form opens on the home page.