GRC

Risk RegisterNew

A full risk management module for creating, scoring, treating, and reviewing information security risks — natively integrated with Hakware findings so technical vulnerabilities automatically feed your risk register.

Get a Demo Login to App

Risk Register

Native risk management built into your security platform

What it does

Key capabilities

Risk Creation & Scoring

Create risks with title, category, description, likelihood, and impact ratings — automatically calculates inherent and residual risk scores.

Treatment Tracking

Select a treatment strategy (accept, mitigate, transfer, avoid) and track treatment progress with owner assignment and due dates.

Review Scheduling

Set review dates per risk — the register flags overdue reviews and upcoming reviews so nothing slips through.

Risk Register Report

Export a PDF with executive risk summary, heat map by category and severity, treatment status breakdown, and overdue review indicators.

Platform Integration

Hakware findings from vulnerability scans, endpoint alerts, and compliance checks can be escalated directly into the risk register.

Risk Heat Map

Visual heat map shows risk distribution across likelihood and impact axes — instantly see your risk concentration.

Highlights

Why Risk Register?

  • Full risk lifecycle: create, score, treat, review
  • Four treatment strategies with progress tracking
  • Automated overdue review flagging
  • Heat map visualisation for board presentations
  • Integrates with Hakware vulnerability and compliance findings
Request Demo Talk to us
Included in OneView

Risk Register is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

Each risk is scored on two axes: likelihood (1–5 scale from Rare to Almost Certain) and impact (1–5 from Negligible to Critical). The inherent risk score is the product of the two values (maximum 25). After treatment controls are applied, a residual risk score is calculated on the same methodology, showing the risk reduction achieved.

Risk Register supports the four standard ISO 31000 risk treatment strategies: Mitigate (implement controls to reduce likelihood or impact), Accept (formally document that the residual risk is tolerable), Transfer (shift financial risk via insurance or contractual liability), and Avoid (discontinue the activity that creates the risk). Each treatment has its own tracking workflow.

Findings from vulnerability scans, compliance dashboard gaps, and endpoint alerts can be escalated directly into the Risk Register as new risk entries. The finding data pre-populates the risk description, category, and affected assets, reducing manual data entry. This creates a direct link between technical findings and the formal risk management process.

ISO 27001 Clause 6.1 requires identifying, assessing, and treating information security risks. The Risk Register covers the full lifecycle: creation with likelihood and impact scoring, treatment option selection and tracking, scheduled review management with overdue flagging, and PDF reports with heat map visualisation — all the elements an ISO certification body will look for.

Related modules

MSX Cyber

ISMS and GRC integration via XGRC Software

Learn more

ProcessesNew

Build, assign, and track security processes end-to-end

Learn more

Document ManagerNew

Security policy and documentation management

Learn more

See Risk Register in action

Request a personalised demo and we'll show you exactly how Risk Register works within your environment.

Request Free Demo All Modules