Free Engineering Workbench calculator
Risk register score
Score a risk before and after controls on a 5 × 5 scale, and check it against appetite.
Governance, risk & complianceHow it's worked out
- Inherent = likelihood × impact. Residual = inherent × (1 − control effectiveness)
- Control effectiveness reduces both factors together
NoteA platform-defined 5 × 5 method. Use your own risk criteria from your ISO 27001 or ISO 31000 process when they differ.
Source: ISO 31000:2018 and ISO/IEC 27005:2022 (method concepts); scoring platform-defined
Need help acting on this number?
VVnT SeQuor's ISO & Compliance Implementation practice helps teams turn this metric into a plan.