In this blog we keep you up-to-date and inform you with the news and trends in governance, compliance and risk
Quantitative risk analysis
9 min readQuantitative analysis is more rigorous and more demanding than qualitative scoring. This article helps you decide which method fits the decision in front of you.
Risk scoring
9 min readRisk scoring inconsistency makes your register unreliable. Learn why teams score the same risk differently and how to calibrate your team effectively.
Qualitative risk assessment
9 min readQualitative risk assessment is practical, but research shows it can reverse risk rankings and hide real exposure. Here is when it works and when it falls short.
Risk dashboard
8 min readA risk dashboard that shows everything tells you nothing. Here is how to design one that surfaces the right information for the right audience and actually drives decisions.
Risk register project failure
8 min readHaving a risk register is not the same as managing risk. This article explains the patterns that make registers fail and what a living one actually requires.
How to use a risk matrix
8 min readLearn how to use a risk matrix effectively and avoid the most common traps: false precision, inconsistent scoring, and amber-everything syndrome.
First line of defense risk management
8 min readThe first line of defense owns the risk but rarely acts like it. Here is what passive first-line ownership looks like and what makes accountability real.
Risk register mistakes
9 min readHaving a risk register and actually managing risk are two different things. Here are ten risk register mistakes and how to avoid them.
Infrastructure project risk management
10 min readMost infrastructure cost overruns are rooted in early-phase decisions. Learn why early-phase risk management determines project outcomes.
Risk Companion features explained: risk register, AI assistant, bow-tie diagrams, Monte Carlo simulation and reporting, built for teams that manage risk every day.
GRC framework
9 min readGRC framework explained: what governance, risk, and compliance really means in practice, why siloed approaches fail, and how integration changes outcomes.
NIS2 compliance
9 min readNIS2 compliance is a documentation challenge, not just a technical one. Learn how a risk management tool builds the evidence trail regulators will demand.
Spreadsheets and legacy GRC tools fail infrastructure teams. Here's why Risk Companion is built for complex, distributed risk management at scale.
Risk matrix
9 min readThe risk matrix is everywhere. It is also widely criticised. An honest look at what it gets right, where it fails, and how to use it better.
ISO 27001 risk management
9 min readISO 27001 risk management explained: how it connects to ISO 31000, ISO 27005, and your enterprise risk programme, and why running them as silos costs you.