Back to free tools
⚠️
Strategy
Business Risk Assessment Tool
Build a live risk register with likelihood × impact scoring in minutes.
Risks tracked
4
Average score
13.0 / 25
Top risk score
20
High risk posture — build mitigation plans within 30 days.
| Risk | Likelihood | Impact | Score | Mitigation | |
|---|---|---|---|---|---|
| 20 · Critical | |||||
| 8 · Medium | |||||
| 15 · High | |||||
| 9 · Medium |
Quick add:
About this tool
Start from a starter set of common startup risks or add your own. Score each by likelihood (1–5) and impact (1–5), and instantly see them ranked by severity with heat-mapped status (Low → Critical) and an overall risk posture verdict.
What it does
- •Likelihood × Impact scoring (1–25)
- •Heat-mapped status: Low → Critical
- •Quick-add presets across 8 risk categories
- •Mitigation plan per risk + exportable summary
Use cases
- ★Quarterly leadership reviews
- ★Investor due diligence prep
- ★ISO 27001 / SOC 2 risk register baseline
FAQ
What scoring scale do you use?
Standard 5×5 matrix: likelihood 1 (rare) to 5 (almost certain), impact 1 (negligible) to 5 (catastrophic). Score 16+ is Critical; 10–15 High; 5–9 Medium; below 5 Low.
Is this enough for SOC 2 or ISO 27001?
It's a strong starting register, but compliance audits want versioning, owners, and review cadence. Export the summary and store it in your GRC tool.