Inherent and residual risk at a glance
Two 5×5 matrices side by side show how far your measures actually reduce each risk.
−12
ISO 31000 risk management · Early access
Your risk register.Without spreadsheet chaos.
EasyRisk.io takes every risk through the ISO 31000 process – with inherent and residual risk, reviews that remind you on their own, and a change history that holds up in any audit.
For teams in growing companies · free plan planned · readers never pay
The problem
Risk management rarely fails for lack of knowledge
It fails because of lists nobody maintains and questions nobody can answer.
The spreadsheet with 14 versions
Risk_register_final_v3_AK.xlsx sits in three folders – and no copy is certainly the current one.
Reviews nobody remembers
Until the next audit. Then a year of backlog gets done in a week.
“Who changed this, and when?”
The auditor's question a spreadsheet cannot answer.
The process
ISO 31000, step by step
Every risk goes through the same five steps. EasyRisk.io shows what is still missing at each one.
- 1
Identify
Record the risk, set its category and owner.
- 2
Analyze
Rate likelihood and impact on a five-point scale.
- 3
Evaluate
Severity follows automatically – from low to extreme.
- 4
Treat
Choose a strategy: avoid, reduce, transfer or accept.
- 5
Monitor
Review regularly, confirm or re-rate the residual risk.
↻ And with every review, around again – without anyone having to remind you.
Features
Everything an audit wants to see
Built for risk managers, security officers and management who take their register seriously – without booking consultant days for it.
Reviews that speak up
Reminders ahead of time, on the due date and when overdue – escalated to the team after two weeks.
- Due in 7 days
- Due today
- 14 days overdue · escalated
Complete history
Every change with person, time and previous value. Nothing gets overwritten quietly.
- S. Berger impact 4 → 3
- S. Berger strategy: reduce
- M. Keller review recorded
Justification, not window dressing
When a risk drops sharply on paper, EasyRisk.io asks for a reason. The residual risk stays traceable – for the board too.
20→4
Reason for the re-ratingBackup site in operation sinceAt least 20 characters required
Readers don't pay
Management, departments and auditors read along without taking a license. You only pay for people who edit risks.
- Adminmanages team and boards
- Editoredits risks
- Viewerfree
Exports for audit and board
The whole register including review history in one click.
- Risk-register.xlsx
- Review-history.csv
Pricing
You pay per editor
Start for free. Readers are included in every plan.
Free
€0 forever
- 1 board
- 1 editor
- 5 viewers
- Unlimited risks
Team
€19 per editor / month
- 5 boards
- Any number of editors
- 50 viewers
- Comments on risks
Business
€39 per editor / month
- 10 boards
- 500 viewers
- Custom categories and scales
- Enforce two-factor sign-in
Planned prices, excluding VAT. EasyRisk.io is not available yet; choosing a plan only registers your interest.
Get early access
Sign up to be among the first to hear when the beta starts – and to try EasyRisk.io before everyone else.
Frequently asked questions
Do I need to know ISO 31000?
No. EasyRisk.io guides you through the steps and shows what is missing for each risk. If you know the standard, you will recognize its flow.
Does EasyRisk.io fit ISO 27001 or NIS2?
A maintained risk register is at the core of both. EasyRisk.io is not a complete ISMS, but it covers the risk part, including proof of who rated what and when.
Can I bring my existing spreadsheet?
An import via template is planned. Feel free to tell us how your list is structured when you sign up.
Where is my data stored?
The plan is to run on servers in Europe. For Enterprise customers, a dedicated tenant with data residency in the EU or Switzerland is planned.
When does EasyRisk.io launch?
EasyRisk.io is in development. Everyone who signs up hears first when the beta starts.