Every risk. Every control. Every change, on the record.
A 30-second read on the firm's risk posture, the magnitude-ranked breach list the Board opens with, the force-directed network graph, the third-party register, the RCSA campaign tracker, and the field-level audit trail — one module, one data layer.
A 30-second read on the firm's risk posture: 4-tile KPI strip (Total Risks, High/Critical, Overdue Reviews, Control Gaps), live 5×5 residual heat map and a Breaches Over Appetite chart split by category. One screen — the board pack writes itself.
The 8-column register: ID · Title · Category · Inherent · Residual · Owner · Next Review · Actions. Colour-coded residual pills match the heat-map cell a risk lives in — and supports residual-exceeds-inherent, the realistic case where a control has degraded.
The Board tab. Per-risk appetite threshold, residual score, a horizontal VS APPETITE delta bar showing breach magnitude and a BREACH / APPROACHING / WITHIN status chip. The magnitude-ranked list the Board should open with.
Score the controls behind every risk: design effectiveness, operating effectiveness, last-test date and a residual override when controls have degraded. Weak controls flag automatically — and roll into the Risk Committee Report from the same data.
Common Risk Templates pre-built for FCA-regulated firms: cyber, third-party, regulatory change, conduct, financial crime, op resilience, prudential. Add to your register in one click — fully editable, fully attributed.
Key Risk Indicators tracked over time. Threshold breach alerts, trend lines, traffic-light status — every KRI tied to a risk in the register and a named owner who explains the move.
Every risk event logged: near-miss, loss event, breach, control failure. Root cause, financial impact, regulatory notification status — with the lessons-learned action that prevents the next one.
Scenario library and stress-test workbench. Run a scenario across the register, see which risks breach appetite, which controls fail and what the firm-wide impact looks like — without spreadsheet archaeology.
The Third-Party Register under SYSC 8 and the Critical Third Parties regime. Tier 1 / 2 / 3 classification, dependency mapping, exit plans, concentration alerts — every supplier the FCA expects to see, in one place.
The force-directed Risk Network. Causal links between risks, shared third parties, shared owners — with concentration alerts that surface the systemic risks no register-only view can show.
Risk Owner Attestation Campaigns. Quarterly RCSA cycles fired across the register, named-owner sign-off captured, signed audit snapshot at year-end — the SYSC 7.1.4R evidence the FCA expects, the ergonomics your team will actually live with.
The SYSC 7 Compliance Checklist. Risk Management Function in place, SMF24 oversight, three-lines-of-defence integration, written risk strategy — every item attested by name and mapped to source rule.
The 15-section Risk Committee Report drafted by Anna AI in 60 seconds. Pulls from your live register, KRIs, events, third parties and scenarios — formatted, evidenced and exportable. Three days of risk-team drafting collapsed to a click.
Long compliance days, gentler on the eyes. A full dark mode across every Risk Management screen — same WCAG-compliant contrast, same audit accuracy, just easier to live in.
