Publications, guides, and deep-dive analyses.
GRC tools explained: how GRC technology structures risks, controls, requirements, evidence, workflows, assessments, issues, remediation, and reporting.
The Delphi Method is an expert-based risk assessment technique described in ISO 31010 that uses structured rounds of anonymous consultation to achieve informed consensus when evidence is incomplete or uncertainty is high.
A risk matrix is a risk assessment technique used to prioritize risks by combining likelihood and consequence. This guide explains how to design, apply and improve risk matrices according to ISO 31010 good practices.
Learn how Brainstorming is used as an ISO 31010 risk assessment technique to identify risks, causes, consequences and opportunities through collaborative analysis.
Checklists are a structured risk assessment technique used to identify known risks, verify controls, detect gaps and evaluate conditions against predefined criteria.
Bayesian Networks are an advanced risk assessment technique used to model causal relationships, update probabilities with new evidence and improve decision-making under uncertainty according to ISO 31010 guidance.
Decision Trees are a structured risk assessment technique used to analyze decisions under uncertainty, compare alternatives, evaluate consequences and select actions based on probabilities, costs and expected outcomes.
SWIFT (Structured What If Technique) is a systematic risk assessment technique that uses structured What If questions to identify threats, deviations, opportunities and potential consequences.
Scenario Analysis is an ISO 31010 risk assessment technique used to evaluate multiple plausible futures, understand uncertainty, assess strategic impacts and support informed decision-making.
Event Tree Analysis (ETA) is a quantitative risk assessment technique used to analyze how an initiating event can evolve into different outcomes depending on the success or failure of controls, barriers and response actions.
