📃 ISO 27001 Required
Information Security Risk Register
Build and maintain your risk register. 5×5 risk matrix, treatment tracking, CSV export. Stored in your browser — no upload.
+ Add New Risk
9
MEDIUM RISK
🎯 Risk Matrix (5×5)
Risk Score = Likelihood × Impact
■ Critical (20-25) — Immediate action required
■ High (10-19) — Action required within 30 days
■ Medium (5-9) — Action within 90 days
■ Low (1-4) — Monitor and review annually
■ Critical (20-25) — Immediate action required
■ High (10-19) — Action required within 30 days
■ Medium (5-9) — Action within 90 days
■ Low (1-4) — Monitor and review annually