The spreadsheet
- Who it is for
- Almost everyone, still. It is free, everybody can use it, and it is the incumbent you are actually replacing.
- What you get
- Fine for a list. It falls over on the parts that matter: nobody trusts a version, the workshop output never makes it back in, and there is no way to see whether a cause has a control in front of it.
Most risk tools lose to a spreadsheet rather than to each other. Any tool you are evaluating has to beat this first.