Risk Register Software
Track risks, score them on a 4×4 scale, auto-map to SOC 2 / ISO 27001 / HIPAA / NIST CSF controls, and generate mitigation tasks on critical and high-severity items. Built for small and mid-market security teams — no enterprise-GRC pricing, no mandatory onboarding call.
Most small security programs start with an Excel risk register. It works — until it doesn't. The risks don't connect to controls. The controls don't connect to frameworks. Board updates are manual. Mitigation tasks live somewhere else (Jira, Notion, nowhere). And nobody updates the file consistently enough to trust on a bad day.
A proper risk register — in a system that also knows your frameworks and your evidence — compounds value. Add a risk; AI suggests the controls it affects. Mark a control as failed; the related risks auto-escalate. Generate a board summary; the live risk register is the source. A single risk register in a spreadsheet is static text; in a Security Program OS it's a live input to every downstream decision.
Radius360's risk register is purpose-built for the pattern.
Clear severity buckets (Critical ≥12, High ≥8, Medium ≥4, Low <4). AI-assisted scoring at risk creation — suggests impact and likelihood based on risk description, category, and affected assets.
Every risk mappable to controls across SOC 2, ISO 27001, HIPAA, NIST CSF, CMMC, PCI DSS, and 25+ others. AI pre-fills mappings based on the risk description; human review finalizes. Framework posture reacts when risks change.
Critical and High risks auto-spawn mitigation tasks with owner, due date, and priority. Tasks link back to the risk and roll up into the dashboard. No more risks without owners, no more tasks orphaned from the risk they address.
Paste a short risk description; AI fills in the category, suggested scoring, related controls, mitigation plan, and framework mappings. Your reviewer edits rather than authoring from scratch.
4×4 heatmap view of the full register. Trend chart showing risk count, severity distribution, and mitigation velocity over weeks. Board-ready in one screenshot.
When a risk decision needs committee input, the 'Defer to committee' workflow captures recommended action, assigns the committee, and tracks the decision timeline. No risks in limbo, no email threads lost.
Both. The Starter tier is priced for small teams — solo security leader or a founding team — and covers the full risk register + 4×4 scoring + mitigation task automation. Larger teams get multi-framework mapping, AI-generated mitigation plans, and unlimited users on higher tiers.
4×4 Impact × Likelihood (so 1–16). Critical ≥12, High ≥8, Medium ≥4, Low <4. Balances clarity (scales fit on a 2-axis heatmap easily) with enough granularity for real decision-making. NIST-aligned but not dogmatic about the specific model — exports support standard risk register formats.
Yes. Every risk can be mapped to one or more framework controls (SOC 2, ISO 27001, HIPAA, NIST CSF, etc.). AI suggests control mappings at risk creation time based on the risk category and description. The framework posture score reacts when a mapped control's risk state changes.
Auto-generated for critical and high risks. Each task has an owner, due date, priority, and is linked back to the risk. Overdue tasks surface in the dashboard and on the weekly alert email. Tasks close out when their risk is marked mitigated or accepted.
Yes — CSV import with column mapping. Most customers import their existing Excel risk register and have it live in the platform within 30 minutes. From that point, evidence automation and cross-framework mapping compound the value.
Standalone risk register tools (LogicGate, RiskLens, Resolver) are enterprise-priced and focused on risk quantification. Radius360 is broader — the risk register is one module of a security program OS that also runs compliance, evidence, policies, and board reporting. For a small-to-mid-sized security program, one platform doing all of that beats four tools in integration maintenance alone.
Free trial, CSV import included. Your existing register live in 30 minutes.
Start free trial