Asset Risk Register

This is the help text the console shows in the help panel on this page.

The Risk Register tracks information security threats and their risk scores across the assets in your ISMS. It implements the ISO 27001 clause 6.1.2 risk assessment process.

Asset-Based Risk View

The table lists one row per asset with its Asset Name, Type, Risk Count and Avg Score (out of 25, colored green, orange or red). Assets come from the Assets page (Directory > Assets); if the table is empty, add assets there first.

AI Threat Generation

When assets exist, a banner offers Generate threats for all assets. The AI suggests plausible threat scenarios for each asset based on its type and name, and adds them to the register right away, marked as AI generated. Open each asset with Score Risks to review, edit or delete them.

Scoring Risks

Click Score Risks on an asset to open the Risk Scoring page, where you set likelihood and impact (1–5) for each threat and choose a treatment.

ISO 27001 Requirement

ISO 27001 clause 6.1.2 requires a documented risk assessment process. This register, combined with the Statement of Applicability, forms the core of your ISMS risk management documentation.