Real-time · AI-assisted · Start to finish

From blank page to risk register.

RiskNow&Next covers risk from start to finish. Run a live workshop to identify risks with your team, then score them, map their controls, and keep a register you can actually maintain.

Log in → Join as participant
Just exploring? Try the live demo → · no sign-up needed
Workshop Identify risks together, live
01Intro
02Strategic
03Macro
04Identify
05Vote
06Assess
07Consensus
then carry the ranked risks forward ↓
Assessment Controls, scoring and a living register
01Review
02Controls
03Effectiveness
04Residual
05Actions
06Register
2
Connected modules,
one flow
13
Guided phases,
blank page → register
15
Industry lenses
tune every prompt
Live
Multi-participant,
real-time rooms
One platform, two modules

Run the workshop. Then build the register.

The hard part of risk isn't the spreadsheet. It's the conversation, and the follow-through. RiskNow&Next handles both, and passes the workshop's results straight into the register.

Module 01 · Risk Workshop
Everyone's input, ranked by the group

Run a live session where people join with a role code, say what could go wrong, and vote to agree on the biggest risks.

Intro Strategic Macro Identify Vote Assess Consensus
  • Live participation. Everyone joins with a role code. Suggestions, votes and results update in real time.
  • Strategic & macro framing. Guided prompts cover change, PESTLE (political, economic, social, technological, legal and environmental factors) and other outside forces.
  • AI risk suggestions matched to the client's industry, ready to accept, edit or reject.
Module 02 · Assessment & Register
Turn raw risks into an owned register

Take each risk through its controls, rate how well they work, see the risk that's left, and assign the actions to deal with it.

Review Controls Effectiveness Residual Actions Register
  • Before and after scoring. Score each risk before and after controls, so you can see how much difference they make (inherent vs residual).
  • Controls and effectiveness mapped to each risk, with AI-drafted control suggestions to react to.
  • Actions with owners and deadlines. Automated email reminders and review nudges keep the register up to date.
Why teams choose it

Built to last.

Not another spreadsheet, and not a mystery AI. A guided process that fits how risk work actually happens.

Useful AI, not a gimmick

Risk and control suggestions draw on a knowledge base of 15 industries and 10 risk types. They're drafts your experts react to, not answers you have to take on trust.

Real-time & collaborative

Participants join a live room with a role code. Suggestions, votes and results show up instantly on the facilitator's screen. No screen-sharing a spreadsheet.

Industry-aware

Pick the client's sector and the whole session adapts. Pharma, financial services, manufacturing, technology and eleven more lenses shape every prompt.

Actions that get followed up

Every action has an owner and a deadline, linked to a real person. Automated reminders and review nudges keep the register current after the workshop ends.

Built for sensitive data

Encryption at rest, two-factor for admins, a tamper-evident audit trail and per-IP rate limiting. Risk data is sensitive, so it's protected that way by default.

Blank page to board-ready

One flow from the first idea in the room to a scored register with controls mapped, ready to present. Export it whenever you need to.

How it works

From kickoff to register in four steps.

1

Set up

Pick the client and industry. Participants pre-fill from your contact list. Share the role codes and you're ready to go.

2

Run it live

Walk through strategic and macro context, capture risks from the room with AI help, and vote down to an agreed set.

3

Assess & score

Map controls to each risk, rate how well they work, and see the risk that's left after controls.

4

Own & maintain

Assign actions with owners and deadlines, then let reminders and review nudges keep the register current.

Security by design

Your risk data is sensitive. We treat it that way.

A risk register holds exactly the things an organisation would least like to leak. RiskNow&Next comes with the controls to match, on by default rather than bolted on later.

Aligned to the SOC 2 Security & Confidentiality criteria on the technical side. Organisational controls are a documented, in-progress roadmap.
Encryption at restAES-256-GCM for secrets & keys
Two-factor authTOTP + recovery codes for admins
Tamper-evident auditHash-chained activity log
Rate limitingPer-IP throttling on the API
Hardened sessionsscrypt passwords · secure cookies
Atomic writes + backupsCrash-safe saves, scheduled snapshots
Get started

Pick your way in.

Run a real session, join one that's live, or explore everything in the demo. No sign-up required.

For facilitators
Log in
Start a new workshop or assessment, or pick up one in progress. Both modules on one dashboard.
Continue to admin
For participants
Join a session
Enter your role code to join a live workshop or assessment. We route you straight to the open phase.
Enter role code