Risk that keeps up with reality.
When intelligence, firewall rules, linked records or a control's compliance status change, RiskVantis proposes a reassessment with a preview of the new score. It flags risks above appetite, suggests duplicates to merge and escalates risk that stays open too long.
Critical RCE in a VPN appliance model present in your asset inventory.
Database engine version reaches end of extended support in 90 days.
New version published for a framework you follow; 6 control wording changes.
Illustration with sample data
What Risk Intelligence & Appetite does
Risk Intelligence is the analysis and monitoring layer over the register. Appetite and tolerance rules can be scoped by organisation, category, asset criticality, framework or regulatory scope, with limits on open duration, exception duration and unmitigated count. Risks above appetite, rising rapidly, critical and open too long, or with overdue treatment escalate automatically.
Context changes never rescore a risk silently. New intelligence, a firewall change, a change to a linked record or a failing control raises a reassessment proposal with a preview of the score change, which a person applies or dismisses. Correlation & Merge suggests likely duplicates with their shared signals, and nothing is merged automatically. Aggregation, concentration and trend views show where risk is building up. Every assessment stores the version of the calculation used, so historical scores can be reproduced.
Key capabilities
Appetite & tolerance
Rules by organisation, category, asset criticality, framework or regulatory scope, with duration and count limits.
Reassessment proposals
Raised by intelligence, firewall changes, linked records and control status, each with a score-change preview.
Correlation & merge
Duplicate suggestions with confidence and shared signals; people decide.
Automatic escalation
Above appetite, rapidly rising, critical and open too long, or overdue treatment.
Reopen on control failure
A closed risk reopens for review when the control it relied on fails.
Reproducible history
Every score is stored with its calculation version; trends rebuild from real history.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Risk Intelligence & Appetite changes for your programme.
Context-aware risk
Changes in the threat landscape and in your controls reach the risks they affect, as proposals.
Less manual re-review
Monitoring decides which risks need a fresh look, instead of re-reviewing the whole register every quarter.
Board-approved tolerance
Appetite rules give a documented, testable basis for risk acceptance decisions.
A cleaner register
Correlation suggests merges so leadership sees one risk, not five versions of it.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Set appetite
Define tolerance rules and escalation thresholds.
Monitor
Runs on schedule or on demand watch for change and breaches.
Review proposals
Apply or dismiss each reassessment with a score preview.
Analyse
Use aggregation, concentration and trends to steer treatment.
Supports your obligations.
Risk Intelligence & Appetite contributes evidence and coverage to these frameworks and regulations.
Common questions.
Will RiskVantis change a risk score automatically?
Not by default. Context changes become proposals. Automatic application is off by default, and even when switched on it only applies to risks nobody is editing.
What can trigger a reassessment?
New external intelligence, firewall rule changes, changes to linked records and changes in a control's compliance status.
Does an appetite rule close or accept risks?
No. Appetite rules flag and escalate; they never mark a risk compliant, accepted or closed.
Works better together.
Risk Register & Intake
Every risk is captured the same way, scored by one engine, mapped to the controls it threatens and tracked through eight visible stages, with a history nobody can…
Learn more →AI & IntelligenceIntelligence Center & Blast Radius
When a vendor is breached or a vulnerability goes public, the Intelligence Center traces it through your dependency map, covering vendors, sub-processors, assets,…
Learn more →Risk ManagementExecutive Risk Dashboard
A live executive dashboard that turns hundreds of risks, findings and vendor issues into the handful of numbers leadership needs: an Overall Risk Score, aging, burn-down…
Learn more →See Risk Intelligence & Appetite in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.