A) Risk & Opportunity Registers

Balance downside protection with upside capture:

• Risk typing: Operational, strategic, compliance, health and safety, environmental, information security, and more.
• Inherent & residual views: Support qualitative or scored approaches per your methodology.
• Opportunities: Track positive risk for innovation and growth themes.
• Linkage: Connect to processes, sites, objectives, and issues.

B) Risk Treatments & Follow-Through

Make treatment plans executable:

• Treatment strategies: Avoid, mitigate, transfer, accept—with documented rationale.
• Owners & dates: Accountability for reduction actions and milestones.
• Status tracking: Visibility from proposed through implemented and verified.

C) Compliance Obligations & Evaluations

Prove sustained conformity:

• Obligation register: Legal, regulatory, contractual, and internal requirements with owners.
• Evaluations: Scheduled assessments with compliance status and findings summaries.
• Issue creation: Raise improvement actions from non-compliance evaluations.
• Evidence: Attach supporting documentation to evaluations.

D) Permits & Licences

Never miss a renewal silently:

• Authority & reference: Clear identification of each permit or licence.
• Sites & owners: Align accountability to operations.
• Validity: Issue and expiry dates with status tracking.

E) Suite Integration

Risk and compliance inform the whole IMS:

• Document control: Procedures implement controls that mitigate risk.
• Audits & KPIs: Verify whether treatments and obligations perform as intended.
• Management review: Feed obligation status, risk trends, and permit health.

1. Dashboard

Risk & compliance dashboard.

2. Risks

Risks Kanban portfolio view.

Risk form — assessment and treatment context.

3. Opportunities

Opportunities Kanban.

Opportunity form.

4. Treatments

Risk treatments — execution tracking.

5. Compliance obligations

Obligations register.

6. Evaluations

Compliance evaluations and evidence.