Configurable risk assessment
Use validated risk registers and configurable matrices to record decisions, assessments, lifecycle state and projected target risk.
Controls and evidence
Reuse controls across risks, record implementation and effectiveness context, and distinguish evidence quality from the risk decision itself.
Treatments and intelligence
Plan treatment actions with owners, dates, statuses and targets, then export deterministic factual intelligence digests without automatic URL retrieval.
Portable local data
Import and export canonical JSON, migrate supported historical schemas explicitly and use opt-in browser recovery for committed work.