A risk assessment that rates the same way twice.

Most risk assessments are a table of words with two numbers bolted on the end, and the numbers mean whatever the person filling them in felt that morning. Run the same site past two assessors and you get two different answers, which is precisely the situation an assessment is supposed to prevent.

The Risk Tool keeps the words — location, hazard, what the risk is, who it affects and how, what you already do about it, who owns the action and by when — and puts a consistent rating underneath them. Inherent and residual sit side by side, so the assessment shows what the controls are actually buying rather than just asserting that they help.

Ratings are produced by the PillarsCore method and reported as bands. The tool supports professional judgement — it does not replace the assessor, and the assessor remains accountable for the assessment.

The survey

The survey walks a site round the Pillars Resilience Cycle in the order an incident meets it: four Ds that stop or slow it, two Rs that deal with it, and what recovery teaches fed back into deterrence. Strong on one and thin on the next is the usual pattern, and it is the one an assessment full of separate rows will not show you. Held against the same site, in the same record, the shape of the gap becomes visible.

Deter — Would an attempt start here at all?
Detect — Would you know it had started?
Delay — How long do you have before it lands?
Deny — Can it reach the thing that matters?
Respond — Who moves, how fast, with what?
Recover — How long until you are working again?

Four Ds to prevent, two Rs to recover, and back again. One site, one record.

What the tool records

A worded risk assessment carrying the columns the work actually needs: location, hazard, what the risk is, who is affected and how, existing controls, further action, owner and deadline.
LICREPH rating applied consistently to every row, scored on the server and reported as a band.
Inherent and residual ratings side by side, so the assessment shows what the controls are actually buying.
Add your own columns, widen any column, and carry both through to the exported report.
The Security Survey, built on the Pillars Resilience Cycle, and the risk assessment held against one site, in one record.
A branded PDF summary of the inputs and the resulting priorities.

Start the assessment.

30-day free trial, then £45.99 a year. The trial is the whole tool, not a cut-down version of it. No card is taken to start it, and nothing is charged unless you choose to subscribe at the end.

Sign in

Your assessments, your sites and your exported reports, held in one record.