Report · PDF · Word · Excel
Risk analysis report Risks, matrix and immediate actions.
The risk analysis report shows your risks in a risk matrix, the ten most important in detail and the next steps with a suggested role and target date. The risks come straight from your gap analysis.
What it is about
Open requirements from the gap analysis become risks, rated by likelihood and impact. The report places them in the risk matrix, shows the boundary of your risk appetite and explains for the most important risks why they are critical and what to do now. Where you have calculated residual risk, it appears next to the inherent risk.
What you need it for
- Document the risk assessment under ISO/IEC 27001 clause 6.1.2
- Evidence risk management under NIS2
- Present the risks to management in plain terms
- Set priorities for risk treatment
What the report contains
- 01
Cover page
Company name (with logo in the PDF), author, date and number of risks. If you choose one, the confidentiality level appears as a note in the footer.
- 02
Executive summary
Total risks, critical, high, medium and low, the average score and the status in words.
- 03
Risk matrix
Heatmap of likelihood and impact, with the number of risks per cell and your risk appetite boundary as a dashed line.
- 04
Top 10 risks
Level, score, scope, affected service, inherent and residual, why critical, business impact and immediate action.
- 05
Timeline
Next steps in four time windows, each with a suggested role and target date.
- 06
Legend and terms
Levels, score and technical terms briefly explained.
Formats
- Word
- Excel
With your company name, in German or English. The gap analysis, risk, audit and board reports also show your logo in the PDF.
Keep working in Excel
The Excel version lists every risk with likelihood × impact, scope, asset and service, plus the heatmap and the timeline as separate sheets.
Frequently asked questions
Where do the risks in the report come from?
From your gap analysis. Open requirements become risks and are rated by likelihood and impact, so gap analysis and risk analysis always match.
Does the report show residual risk?
Yes, once you have calculated residual risk. The top 10 risks then show inherent and residual risk side by side.
How large is the risk matrix?
5 × 5 by default. The matrix in the report follows the setting in UniqSuite.
Can I add my own risks?
Yes. You can adopt typical risks from the catalogue or write your own. They appear in the report alongside the risks from the gap analysis.
Can I change how a risk is rated?
Yes. You can adjust likelihood and impact for each risk and give a reason. The report uses the adjusted values.
See your own reports.
In half an hour we show you how the reports are built from your data.