This is a live, read-only demo. You’re exploring a fictional company, “Tailwind Systems.” Nothing here can be edited, and the data resets nightly. Create a free workspace to build your own program.
Risks
Risk register
Likelihood × impact, treatment, and the controls mitigating each risk.
Total
12
Open
10
High
1
Risk heat map
Effective (residual where assessed) likelihood × impact. Closed risks are excluded.
| Almost certain | · | · | · | · | · |
| Likely | · | · | · | 1 | · |
| Possible | · | · | · | 2 | · |
| Unlikely | · | 1 | 2 | 3 | 1 |
| Rare | · | · | · | · | 1 |
| Insignificant | Minor | Moderate | Major | Severe |
Low (1-3)Guarded (4-7)Elevated (8-14)High (15-25)Rows = likelihood · Columns = impact
| Risk | Category | Level | Treatment | Mitigating controls | Status |
|---|---|---|---|---|---|
Critical vendor data breach A breach at a critical sub-processor could expose customer data. | Third-party / vendor | medium | mitigate | None linked | open |
Single cloud region outage A regional outage of the primary cloud provider could disrupt the service. | Availability | medium | mitigate | None linked | open |
PII mishandled causing privacy breach Improper handling of personal data could trigger regulatory exposure. | Legal / compliance | medium | mitigate | None linked | open |
DDoS attack on public API A volumetric attack could degrade availability of the public API. | Availability | low | transfer | None linked | open |
Non-compliance with a SOC 2 control A control operating ineffectively could result in an audit exception. | Legal / compliance | low | mitigate | None linked | open |
Insider misuse of admin access A privileged insider could misuse access to data. | People | low | mitigate | None linked | open |
Phishing leads to credential compromise Staff targeted by phishing could expose credentials to production systems. | People | high | mitigate | None linked | treating |
Unpatched CVE exploited A known vulnerability left unpatched could be exploited. | Technology | medium | mitigate | None linked | treating |
Secrets committed to source control Credentials accidentally committed could be harvested. | Technology | medium | mitigate | None linked | treating |
Backup fails silently An undetected backup failure could prevent recovery. | Availability | medium | mitigate | None linked | treating |
Laptop theft exposes local data A lost or stolen device could expose locally cached data. | Physical | low | accept | None linked | accepted |
Departing employee retains access Access not revoked promptly at offboarding could be misused. | People | low | mitigate | None linked | closed |