01
Likelihood times impact
Score every risk on both axes and record the residual risk after treatment.
Risk management
A risk register your board can read.
A living risk register with likelihood and impact scoring, a heat map, and a mitigation workflow that follows every treatment to closure.
The job
From scattered files to one place
Today
A risk lives in a row of a spreadsheet. Its owner changed, its score is a year old and nobody can say whether the mitigation happened.
In CyberPlug
Each risk has an owner, a likelihood and impact score, a residual score and a list of mitigation tasks. The heat map is drawn from the register, so the picture and the data cannot disagree.
Capabilities
What it does
02
An owner on every risk
The Risk Manager assigns a person, and the audit trail shows who changed what.
03
Mitigation tasks to closure
Treatments become tasks with owners, and each follows to closure.
04
A heat map from the register
See where risk concentrates, for management and for the board.
05
Built for the frameworks that ask for it
ISO 27001 asks for risk assessment and treatment, and so does the Bank of Ghana's directive.
How it connects
Part of one platform
- Evidence collection shows whether the controls that treat each risk are working.
- The executive dashboard reports risk KPIs to the board.
Who uses it. Risk Managers log and score risks and track mitigation. Compliance Officers review. Executives read the results.
Frameworks it serves
Works across the frameworks you answer to
FAQ
Questions we hear most
What scoring method do you use?
Likelihood times impact, with residual risk recorded after treatment.
Who sees the register?
People you invite, with a role. Auditors get read-only access.
Does it replace our risk workshops?
No. Workshops decide what the risks are. CyberPlug records them, scores them and follows the treatments.