Understand the risk, document the decision, track the response
Assess risks across applications, suppliers, processes and organizational activities. Move from identifying threats to assigning mitigation work, with assessments linked to the assets and processes they affect.
Make assessments more consistent
Identify the scope of an assessment, the threat, the vulnerability and the possible consequences. Evaluate impact and likelihood using defined scales and record the resulting risk level. Assessments may concern a system, a supplier, a process or another organizational area.
- Threats and vulnerabilities
- Impact and likelihood scales
- Risk level and assessment scope
Turn risk analysis into an explicit decision
Record whether a risk is accepted, reduced, transferred or avoided. Keep the decision alongside the assessment and follow its status through review, approval, acceptance, rejection or archiving as appropriate.
- Accept, reduce, transfer or avoid
- Review and decision statuses
- A clear assessment record
Keep corrective work visible
Assign risk-reduction activities to responsible people. Capture deadlines, descriptions and status, including planned, in-progress, completed, delayed or canceled actions.
- Action owner and due date
- Work status and details
- Visibility into delayed activities
Assess the real systems behind the risk
Associate an assessment with relevant applications, data resources, suppliers or processes maintained elsewhere in Sequoia Manager. That relationship helps reviewers understand the operational context of a risk.
- Relevant systems and suppliers
- Organizational scope
- Links to asset information
See how these capabilities work together
Discover how Sequoia Manager connects information, responsibilities and everyday processes across the organization.