RISK ASSESSMENT
AI-powered risk management, live in days not months.
Run risk management in one place: identify, score and follow up on the risks that matter for your business. Suggested risks and mitigations get you started, and the register stays current for your board and your auditor.
ALIGNED TO
NIS2
DORA
GDPR and ISO 27001 coming soon
From manual tracking to audit-ready in weeks, not quarters.
01
Risks tracked in spreadsheets and email threads, brought into one live register with clear ownership.
02
Suggested risks and mitigations get you started, and the dashboard updates as actions close and controls change.
03
Export a board or audit-ready summary any time, instead of rebuilding one from scratch before every meeting.
AI THAT DOES THE FIRST DRAFT
You don't start from a blank page
01
Suggested risks for your company and industry
AI proposes the risks that typically apply to a business like yours, so you start from a working draft instead of a blank page. Your team decides what goes in.
02
Recommended mitigations
For each risk you get suggested controls and actions to consider, with the reasoning shown, so deciding what to do next takes minutes rather than workshops.
PLATFORM CAPABILITIES
Everything you need for risk management. Nothing you don't.
A live risk register, consistent AI risk scoring and clear ownership. The point is that risk work leads to decision and evidence, not to another document someone has to maintain.
Live risk register
Risk register software that keeps operational, IT and third-party risk in one place, with threats, vulnerabilities and controls linked together. Every entry is structured and traceable, so nothing important sits in a personal spreadsheet.
Risk matrix and heatmap
See likelihood against impact at a glance, and know which risks deserve attention this quarter and which ones can wait.
AI risk scoring model
A standard scoring model so every risk is judged the same way, with AI risk scoring to speed up the first pass. Comparisons hold up, and decision rest on evidence rather then opinion.
Mitigation and action tracking
Give every action an owner, a deadline and a status. Progress is visible, and exposure goes down in a way you can actually show.
Linked to assets, incidents and tasks
Risks connect to the systems they threaten and the incidents that prove them real, so your register reflects what’s actually happening in the business.
Framework coverage
Framework support covers NIS2 and DORA today, with GDPR coming soon and ISO 27001 to follow. Map your controls once they carry across, so you assess once instead of once per framework.
Board-ready reporting
Export a clear summary of your risk posture, top risks and open actions in one click, ready for the board or the auditor.
"With Trustlinks we've gained complete oversight of risks and suppliers, allowing us to act before issues escalate, and strengthening trust across our organisation."
Cecilia Axell Ryttergaard
CEO, Travel Support Europe
Why choose Trustlinks for risk assessment
Most risk platforms assume you already have a GRC team. We assume you don’t, and give you the structure, templates and guidance to run a credible risk programme anyway.
Built for teams without a risk function
No risk manager, consultants and no GRC background needed. Suggested risks and recommended mitigations give you a starting point, even when nobody on the team has done this before.
A working assessment in days, not months
This solves one urgent job rather then starting an org-wide overhaul. You can be working in a real register the same week you sign up.
Replace manual tracking with a live register
A static register is out of date the day it’s saved.Trustlinks keeps up as actions close and controls change.
One assessment across every framework
NIS2 and DORA are supported today, with GDPR coming soon and ISO 27001 to follow. They overlap far more than they differ, so you assess once and see coverage across them.
ALREADY HAVE A RISK PROGRAMME
Import your existing register so earlier work carries over, then keep going in a structure that holds up at audit.
STARTING FROM SCRATCH
Start from a library of common risk scenarios with suggested controls, so you first assessment takes days rather than months.
HOW IT WORKS
From blank page to a live risk register in four steps
A practicle path from setup to a risk programme your board and your auditor trust.
01
Start with your risks
Go straight into adding and managing your operational risks. No setup project, no framework decision to make first.
02
Assess and score risks
Work through guided assessments with a consistent scoring model, starting from templates and suggested risks.
03
Track mitigation and ownership
Assign owners and deadlines to each action, and watch exposure fall as the work gets done.
04
Report and prove compliance
Export board summaries and timestamped evidence straight from the register when audit time comes around.
PRICING
From 99 EUR per month
Risk assessment is available as a standalone subscription, so you don’t have to commit to the full platform to get started. The price scales with the number of employees, and onboarding is included.
The prices shown are examples. You always get an individual quote based on what you actually need.
- The full risk module: register, scoring, heatmap, mitigation tracking and reporting
- AI suggested risks and recommended mitigations
- Unlimited users, so the whole team can take part
- Guided onboarding and support in your language
NOT READY TO TALK?
Check your risk score in 5 minutes
A short, free self-assessment that shows where your organisation stands on risk management and which gaps to close first. No sales call needed.
Supplier risk belongs in the same register
Third parties are one of the biggest sources of risk you carry. In Trustlinks, supplier findings feed the same register, so exposure never ends up in a seperate tool.
LET'S GET IN TOUCH!Want us to tell you more?
Find out how Trustlinks can support your organisation. You simply choose when, and we’ll explain the why’s and how’s!
FAQ
Risk management questions
Common questions about running risk assessment under NIS2 and DORA, and about using the risk module on its own.
Can we buy risk assessment on its own?
Yes. Risk assessment works as a standalone module from 99 EUR per month, with the price scaling by number of employees. You can add other parts of the platform later without moving your data. Pricing on the site is an example, so you always get an individual quote based on what you actually need.
What is a risk assessment tool?
A risk assessment tool helps you identify, score and follow up on the risks facing your organisation in one structured place. Instead of a spreadsheet that ages the moment it’s saved, you get a live register with consistent scoring, named owners, mitigation actions and evidence you can export.
How do the AI suggestion work?
Trustlinks proposes risks that typically apply to your industry and type of business, and suggests mitigations for each one. They are suggestions only. Nothing enters your register until someone on your team reviews and approves it, so you keep full control of what you assess and how it’s scored.
How is Trustlinks diffrent from a generic risk platform?
Trustlinks is built for organisations without a dedicated GRC team. Most platforms are powerful but heavy: they assume a risk manager, a rollout project and a consultant budget. Trustlinks is self-serve, preconfigured and quick to adopt. Framework support covers NIS2 and DORA today, with GDPR coming soon and ISO 27001 to follow, but it’s the way it fits a smaller team that makes the diffrence day to day.
Can it cover several frameworks at once?
Yes. Controls and evidence are reused across the frameworks we support, NIS2 and DORA today with the GDPR coming soon and ISO 27001 to follow, so one assessment shows coverage against each of them. You can also run the risk module on its own to support other standards and certifications one work under, such as ISO 9001.
Do we need consultants to roll it out?
No. Frameworks, risk templates and scoring models are already set up, and onboarding is included. Most teams finish their first assessment without any outside help.
How does it help at audit time?
Evidence, owners and review dates and captured as you work rather than reconstructed afterwards. At audit you export a timestamped snapshot of the register together with the supporting evidence, so there’s no scramble through old files and email threads.
