Amazon Web Services
LiveConfiguration evidence for accounts, storage, logging, and network rules.
Platform / Risk register
Risk register
Risks scored, treated, and reviewed on a cycle
Record risks with likelihood and impact, link them to the controls that treat them, and review the register on the schedule your framework expects. Accepted risks carry a named approver and an expiry date.
Risk register workspace Cloud · On-prem
- Features
- 4
- Connected integrations
- 6
- Deployment options
- 2
What risk register does
The feature list below is the module definition the template ships with; counts and wording come straight from the module data file.
-
Likelihood and impact scoring with a consistent scale
-
Treatment plans linked to controls and owners
-
Risk acceptance workflow with expiry dates
-
Board-ready register export for each review cycle
Connected integrations
Drawn from the integration directory by category (Ticketing, Cloud infrastructure): 6 of 18 directory entries connect to this module.
Microsoft Azure
LiveSubscription policies, resource configuration, and activity log exports.
Google Cloud
LiveProject IAM, audit logs, and firewall rule snapshots.
Jira
LiveChange tickets linked to deployments, with approval trails.
ServiceNow
LiveChange, incident, and problem records with assignment history.
Linear
BetaIssue workflow states and project membership as change evidence.
Deployment options
Risk register supports two deployment modes. The platform page compares the modes across all five modules.
Cloud
Runs in the hosted service. Collectors connect out to your systems over encrypted links, and the workspace region sets where the stored evidence lives.
On-prem
Runs inside your own network boundary. Collectors and stored evidence stay on infrastructure you operate; auditor access is exposed through a scoped, read-only gateway.
Related modules
The other modules read and write the same evidence record.
-
Evidence collection
Evidence that gathers itself, dated and sourced
-
Policy management
Policies with owners, versions, and review dates
-
Vendor assessments
Every vendor reviewed, every review on file
-
Trust center
A public page that answers security questions once
Put risk register to work
A demo connects two or three of your source systems and shows the first readiness picture from your own data.