Business Continuity Risk Assessment Report – Register, Heat Maps, Continuity Measures and Live Workbook

Description

What the report contains

You already have your heat map, your top risks and your findings for free. This is the full assessment behind them, written up as the record an auditor, a board or a risk committee expects to see.

• The complete register of disruption risks, highest level first. Every risk with its owner, the activities and resources it affects, the arrangements already in place, its likelihood, impact and level, and the rationale for the rating.
• Heat maps today and after treatment, side by side. Both drawn against your own appetite line, so anyone can see at a glance what the continuity strategy achieves.
• The treatment plan by due date. For each risk: the decision, the planned actions, the continuity measures it relies on (grouped by the ISO 22301 clause 8.3 resource categories), the owner, the due date, the current and target level, and the risk owner’s acceptance.
• Every finding, with what closes it. Each gap between your assessment and what ISO 22301 clause 8.2.3 asks for, the risks it applies to, what to change, and the document that closes it.
• An AI-assisted analysis and 30/60/90-day roadmap. A one-sentence verdict, where you stand and what it means, a statement for senior management, three to five priorities and a roadmap, written from your own ratings and checked automatically against them.
• Your process score in detail. Nine weighted dimensions, from criteria and ownership to treatment and residual risk acceptance, so you can see exactly where the assessment is thin.
• Your criteria, written up. Likelihood and impact scales, risk bands and the appetite line every rating was made against.
• What changed since last year. Run next year’s review from this register and the report shows which risks were added, closed or moved level, and how the headline figures changed.

The live Excel workbook

A risk register is only useful if it can be kept up to date when something changes, so you also get the register as a working file, not a static export:

• Dashboard: the process score, level and heat maps, recalculated as you edit.
• Criteria: your scales, band ceilings and appetite line, which drive every calculation.
• Scope and Risk register: change a likelihood or impact and the level, band and appetite check update.
• Treatment plan: decisions, actions, owners, due dates, targets and acceptance.
• Continuity measures: the full catalogue of measures, with those your treatments rely on marked as selected and the risks they treat listed, ready to carry into your business continuity strategy.

How to get it

1. Run the free business continuity risk assessment: set your criteria, list what is in scope, pick risks from the library, rate them and decide how to treat each one.
2. See your heat map, top risks and findings free on the result page.
3. Choose Get the full report. The report and workbook are in your account straight away, and they rebuild from your latest answers whenever you download them.

Pairs with the business impact analysis: import your analysis as the scope, and its activities and dependencies come in with their criticality already set.

One payment covers this assessment. Edit it as often as you like and download the updated report at no extra cost. This is a self-assessment built from the information you enter; it is not a certification or an audit opinion.