Risk doesn't wait for the quarterly review

Risk, audit, compliance and resilience in one operating environment, continuous, not periodic.

Request a demo Take the 3-minute assessment Explore the platform
No matches for “{{ heroQuery }}”
Try a solution, a sector or a GRC term, or .
{{ g.name }}{{ g.countLabel }}
{{ r.t }} {{ r.d }}
↑ ↓ to navigate · Enter to open · Esc to close
{{ c.label }}
Risk Hawk
OverviewRisksControlsAuditsVendorsSettings
AK
Risk overview Integrations
Open risks↗ 4.1%
142
Above appetite↘ 12.0%
9
Controls tested↗ 3.2%
86.4%
Open issues↘ 8.3%
37
Vendors reviewed↗ 6.1%
212
Connect data sources to Risk Hawk
Evidence and events straight from the systems that produce them
CB Core bankingTransactions, limits Launch importer
AD Active DirectoryUsers, access Launch importer
VP Vendor portalContracts, SOC reports Launch importer
Action ▾
Control tests by monthPassedExceptions
Dec
Jan
Feb
Mar
Apr
May
Jun
This quarter ▾
{{ c.kicker }}
{{ c.title }}
{{ c.meta }}
Risk register

Risk, anytime, wherever you are

Every risk, owner and rating in one live register, recalculated the moment a control or incident changes it.

  • Inherent and residual scores side by side
  • Owners notified when a rating moves
  • Filter by entity, process or appetite
Control testing

Controls that prove themselves

Tests run on schedule against evidence pulled from source systems. Exceptions open issues on their own.

  • Automated tests on access, change and reconciliations
  • Evidence attached to every result
  • Exceptions linked to the risks they expose
Third-party risk

Vendors scored continuously

One score per vendor. Lapses show before renewal.

  • Criticality-weighted scoring
  • Expiring SOC reports flagged 60 days out
  • Remediation tracked with the vendor
Board reporting

Ready before the meeting

Committee packs draw from live data, so trends and breaches are current on the day, not the week before.

  • KRI trends against appetite
  • One-click board and regulator views
  • Every figure traced to its record
Risk Hawk {{ n.label }}
Risk registerThis quarter
Open risks
142
Above appetite
9
Owners
38
Liquidity coverage breachTreasuryHigh
Branch cash reconciliationOperationsMedium
Cloud outsourcingTechnologyMedium
KYC refresh backlogComplianceHigh
Payroll accessHRLow
Control testsThis quarter
Tests run
1,284
Pass rate
94.2%
Exceptions
17
CTRL-0412 · Access reviewAutomatedPassed
CTRL-0218 · Change approvalAutomatedPassed
CTRL-0331 · Vendor paymentSampledException
CTRL-0107 · GL reconciliationAutomatedPassed
CTRL-0520 · Backup restoreManualDue
Vendor scoresThis quarter
Critical vendors
46
Reports expiring
6
Avg score
78
Cloud hosting91
Card processor84
Core banking77
Call centre58
Courier42
Board packThis quarter
KRIs in range
31 / 36
Breaches
2
Pack status
Ready
Operational loss KRI vs appetite
Hawk-i
Answers cite their sources
{{ t.label }}
Which risks above appetite have a failed control this quarter?
Three risks are above appetite with at least one failed control:
Liquidity coverage breachCTRL-0331 failed
KYC refresh backlogCTRL-0415 failed
Cloud outsourcingCTRL-0520 overdue
RSK-0142RSK-0097RSK-0211
Compare our Outsourcing Policy v3 with the RBI IT outsourcing directions.
Coverage is 82%. Two gaps need attention:
§5.2 Exit strategy for critical vendorsMissing
§7.1 Annual review of sub-contractorsPartial
§4.3 Board-approved risk frameworkCovered
POL-OUT-v3 §6RBI/2023-24/102
Draft a test for quarterly privileged access review on the core banking system.
Proposed test · CTRL-0412
1. Extract privileged users from CBS on test date2. Match against HR leavers and role matrix3. Confirm reviewer sign-off within 10 days
Sample: all 46 accounts · Evidence: user extract, approval log
What changed in regulation this week that affects us?
One new circular applies to you:
Cyber incident reporting within 6 hours
Effective 1 Jan · replaces the 24-hour window
Incident Response PolicyUpdate §3.4
CTRL-0288 · Escalation SLARetest
CERT-In 2026/07POL-IR-v2
Ask Hawk-i about your risks, policies or controls
Hawk-i · Ask the register

Ask your risk data in plain English

Hawk-i reads the live register, controls and incidents, then answers with the records it used.

  • Answers cite the exact risk and control IDs
  • Respects each user's access rights
  • Follow-up questions keep context
Hawk-i · Policy gap analysis

Find the clause your policy is missing

Compare a policy against a regulation or standard and get the gaps, clause by clause.

  • Maps each requirement to a policy section
  • Flags missing and partial coverage
  • Suggests wording for owner review
Hawk-i · Control test drafting

Test steps drafted in seconds

Describe a control and Hawk-i proposes the test procedure, sample size and evidence to request.

  • Aligned to your testing methodology
  • Evidence requests sent from the draft
  • Reviewer signs off before it runs
Hawk-i · Regulatory watch

New circulars, already mapped

When a regulator publishes, Hawk-i summarises it and lists the policies and controls it touches.

  • Summaries within hours of publication
  • Impact linked to owners and deadlines
  • Obligations added to the compliance calendar
 Meet Hawk-i

Powering risk, audit and compliance teams.

From regulated startups to established enterprises.

{{ s.value }}
{{ s.label }}
{{ c.logo }} {{ c.sector }}

{{ clientNote }}

Read the deployments ›
The big idea

The World Changed. Governance Has to Catch Up

Traditional governance runs in cycles. Modern organisations run continuously. Risk Hawk closes the gap.

{{ m.icon }} {{ m.step }}
{{ m.kicker }}
{{ m.mark }} {{ i.label }}
The platform

One Platform. Many Risk Realities

Five pillars, one control library, one version of the truth.

{{ p.icon }}
{{ p.title }}

{{ p.desc }}

{{ i.label }}
Learn more →

One risk picture, from board to branch

Registers, controls, incidents and vendors in one view. The board sees it in a day, not a quarter.

  • Residual risk recalculated when a control fails, not at the next review
  • Appetite breaches routed to the owner who can act on them
  • Every number traces back to the record behind it
Enterprise risk

Controls that prove themselves

Continuous testing. Evidence arrives automatically; exceptions open issues.

  • Automated tests on access, change and reconciliation controls
  • Design and operating effectiveness kept separate, as auditors expect
  • Issues linked to the risks they leave exposed
Internal audit

Reporting that is ready before the meeting

Board packs and regulator returns built from live data, not spreadsheets.

  • Board, audit committee and regulator views from one source
  • Trend lines on KRIs, not point-in-time snapshots
  • Export to the formats your stakeholders already use
See the platform
From data to decision

Risk Data Is Only Valuable When It Changes a Decision

Governance should drive action, not just record data.

{{ f.stage }} {{ f.n }}
{{ f.headline }}
{{ i.label }}
Insights

Shaping the Conversation

All insights →
{{ i.kind }} {{ i.read }}
{{ i.title }}

{{ i.standfirst }}

{{ i.cta }}

See continuous governance on your own register

45 minutes. A practitioner. Your scenario, configured live.