Risk mapping
- Risk register
- Likelihood × impact matrix
- Risk owners
- Inherent and residual risk
← InSighter
RiskSighter
Anticipate your risks.
Risk management following an ISO 31000 approach: risk mapping, assessment, alerts and action tracking, based on your InSighter data environment.
Brasserie Lambert SRL › FY 2027 › DashboardSearch a risk, an owner…
Dashboard
Risk profileAssessment following an ISO 31000 approach: likelihood × impact, before and after controls.
Board reportNew risk
Brasserie Lambert SRL › FY 2027 › ObligationsSearch a risk, an owner…
Management · compliance
Obligations and complianceThe legal and regulatory obligations that apply to the file, linked to the controls that cover them and to the risks they concern.
Obligations tracked61 out of scope, monitored
Compliant350% of obligations
Partial or non-compliant20 non-compliant
To assess1never assessed
Deadlines in the next 30 days2
Excise · Excise returns and tax warehouseReview in 12 days · M. Dubois (CFO)Compliant
GDPR3 obligations
ObligationOwnerCoverageLast assessmentStatus
Record of processing activities (art. 30)O-01 · Record updated after the web shop opened.L. Martin (IT)C-08 EffectiveR-0723 Jul 2026next in 125 daysCompliantAssess
Brasserie Lambert SRL › FY 2027 › CybersecuritySearch a risk, an owner…
Tools · security
CybersecurityA check-up of ten essential measures, ranked by priority, linked to the cyber risk in the register.
The ten measuresclick to answer
Strong authentication on email and remote accessBlocks most account takeovers.YesPartlyNo
Offline backups, restore tested at least once a yearThe only real defence against ransomware.YesPartlyNo
Security updates installed within 30 daysAttacks mostly exploit flaws that are already fixed.YesPartlyNo
ResultReasonable control
Six measures still need to be put in place or completed.
In order of priority
- Strong authentication on email and remote access partial
- Offline backups, restore tested at least once a year missing
Linked risk: R-06, ransomware on the management system.
Brasserie Lambert SRL › FY 2027 › Financial risksSearch a risk, an owner…
Tools · finance
Going concernA score built on seven indicators taken from FinSighter and FidSighter, with what to do as soon as one of them moves out of range.
Going-concern scoreSound position
No worrying signal on the indicators tracked.
Solvencyequity / balance sheet total27.6%FinSighter · 2026 balance sheetNormal
Current ratioassets / short-term debts1.05FinSighter · 2026 balance sheetNormal
Results (€k)2024 · 2025 · 2026+120 · +85 · −40FinSighter · annual accountsTo watch
What to do
- Results : explain the loss for the year; if it repeats, draw up a costed recovery plan.
Two loss-making years in a row justify a recovery plan.
Add the risk to the registerStress tests →
Planned features
What RiskSighter does.
For risk managers, internal control, finance departments.
Assessment & alerts
- Risk assessment
- Thresholds and alerts
- Risk indicators
- Trends
Financial risks
- Liquidity, credit, interest rates
- Stress tests
- Adverse scenarios
- Link with FinSighter
Operational risks
- Business continuity
- Critical suppliers
- Cybersecurity and data
- Incidents
Internal control
- Key controls
- Tests and evidence
- Action plans
- Deadline tracking
Governance
- ISO 31000 approach
- Board reporting
- History
- Audit trail
What will the risk register contain?
Each risk with its category, owner, assessment before and after controls, indicators, controls and action plans.
How do you read the risk heat map?
It is a 5 × 5 likelihood × impact matrix. Each risk is placed according to its score before controls (inherent), after controls (residual) or its target. A boundary line marks the risk appetite set by management.
Is RiskSighter available?
Not yet: RiskSighter is planned after the other applications. You can be notified of its launch via the beta form.
How will a risk be assessed?
Following an ISO 31000 approach: likelihood and impact rated from 1 to 5, before and after existing controls. The residual score is compared with the risk appetite.
What is a risk indicator?
A figure tracked over time that signals a risk is getting closer, with alert thresholds. It can be fed by data from the other applications.
How do you start if you have never mapped your risks?
With a quick diagnosis: a series of questions on the main areas, which measures your level of control and proposes the first risks to add to the register.
How will RiskSighter assess going concern?
Through a score calculated from several financial indicators taken from FinSighter and FidSighter, with recommendations and, if needed, the addition of the risk to the register.
Which stress tests will be possible?
Adverse scenarios on liquidity, credit and interest rates, to check that the business can meet its commitments.
What about customer risk?
A dedicated tool will track revenue concentration, outstanding balances and credit limits, late payments and guarantees, with actions to create.
Will RiskSighter help prepare a business continuity plan?
Yes: fallback procedures for each critical process and a print-ready business continuity plan.
How will incidents be tracked?
Each incident is recorded, linked to the risk concerned and tracked until it is resolved.
What will the cybersecurity section cover?
A check-up of ten essential measures, ranked by priority, linked to the cyber risk in the register.
What about insurance?
Existing policies, uncovered needs, coverage of the main risks and a note ready for the broker.
How will internal control work?
Key controls are linked to the risks they cover. Each test is documented with its evidence, and failures lead to action plans tracked until their due date.
Will legal obligations be tracked?
Yes, in the Legal and compliance tool: obligations linked to controls, regulatory monitoring, key contracts with their notice periods, disputes and provisions.
What is the ISO 31000 approach?
The international reference standard for risk management: identifying, assessing, treating and monitoring risks on an ongoing basis. RiskSighter follows its approach.
What will the board report contain?
The risk profile, risks above appetite, indicators on alert and progress on actions, for the board of directors or management.
Will there be a periodic review?
Yes, a quarterly risk review, with the history of assessments and an audit trail.