Assess the risk of every change with confidence
Everything a risk assessment needs, in one place
Built for the people who raise, assess, review and approve information risk, and for the ones who have to answer for it later.
One flow, from intake to sign-off
A scored triage decides whether a full assessment is needed. The IRA then moves through the BUSO and L2 reviews to approval, with every return and resubmission on record.
Evidence on every question
Links and files against each answer, with resumable uploads for large documents and an AI review that reads the evidence and says what is missing.
Roles that match the business
Users, BUSOs and L2 leads scoped to their segments and business units, Change Portfolio Leads across the portfolio, and admins over all of it.
AI where it helps
A summary of each IRA with every point cited, plain-words search, and an assistant that answers from the IRAs you are allowed to see.
Reports and Power BI
Dashboards by segment and business unit, overdue tracking, a calendar of what is due, and a Power BI feed for the company’s own reporting.
Notifications people read
In-app and email notices for each hand-off, mentions in comments, and email templates an admin edits without a release.
Fits the Microsoft estate
Microsoft Entra sign-in with multi-factor authentication, SCIM provisioning, Entra groups for roles, Jira sync, GitHub security scans and webhooks.
Audit trail and security
Every request, sign-in, change and view logged with before and after; lockout, session limits, two-factor sign-in and security alerts for admins.
Accessible by design
Built to WCAG 2.1 AA: named controls, AA contrast in light and dark, keyboard-operable flows, and an automated scan of every page in the test suite.
How it works
Four stages, each with a named owner and a clear hand-off.
- 1
Intake and triage
Raise the change and answer the scored triage. The rating says whether a full IRA is needed; the BUSO and L2 lead review the triage and sign it off.
- 2
Assess
Work through the questions with evidence on each one. AI checks read the evidence and point at gaps before anyone else has to.
- 3
Review
The BUSO review, then the L2 IRA review. A return sends it back with the reasons on the IRA; a resubmission keeps the history.
- 4
Approve and keep
The approval closes the IRA with its PDF, and every answer, review and decision stays on record, searchable and reportable.