Risk, incidents & assets
Risks, incidents, assets and exceptions, linked to each other.
See which risks sit on which assets, which controls treat them, and what happened when something went wrong.
Used by
Risk owners, security teams and CISOs
In this area
- Risk register
- Incident management
- Asset inventory
- Exception register
Risk, incidents & assets
Incident lifecycle
- 01Triage
- 02Investigate
- 03Contain
- 04Eradicate
- 05Recover
- 06Close
What's included
What Risk, incidents & assets covers
Risk register
Assess, treat and decide, with the reasons kept.
- Risk assessment and treatment plans
- Mark treated, accept, close or reopen
- Link risks to controls, assets and issues
- Start from the platform risk library
- Full history on every risk
Incident management
Run an incident from first report to closure.
- Lifecycle from triage to close, plus false positive and reopen
- Record regulator notifications as you make them
- Link the assets and risks involved
Asset inventory
Know what you have and what it's worth.
- Asset tree
- Valuation
- Lifecycle: repair, storage, return to service, retire, dispose
- Link to risks and assign to people
Exception register
Exceptions that expire.
- Time-boxed exceptions to a policy, control or configuration
- Submit, approve or reject
- Renew before expiry or revoke
- Link to the controls, findings and issues they cover
KashiGuard
The rest of the platform
Every area works on the same records, so nothing is entered twice.
See KashiGuard on your own process.
A 30-minute demo built around the vendors, audits and frameworks you deal with today.