The risk toolkit
Free tools, templates, and packs for Heads of Risk - from diagnosing your framework to building the business case and choosing the right platform. Built from doing the job, not describing it.
RCSA Maturity Scorecard
Rate your RCSA across five dimensions in 10 minutes. Get a maturity level per dimension and a written diagnosis of where the gaps are.
Total Cost of Ownership Calculator
See the real three-year cost of a GRC tool, not the licence sticker price. Factor in implementation fees, internal admin time, and renewal uplift.
Business Case Template for Risk Tooling
A fill-in-the-blanks pack to get budget approved. Problem statement, cost-of-inaction model, an objection-handling table by stakeholder, and a one-slide board summary.
Contract Red-Flags Guide
The clauses that bite - auto-renewal windows, data-exit fees, weak SLAs, uncapped price uplifts. With the exact question to ask the vendor for each.
GRC Tool Shortlist Pack
A weighted scoring grid to compare vendors side by side - UX, deployment speed, first-line adoption, reporting, price, and references. Score three tools, get a number.
Vendor Demo Question Bank
The 15 questions that expose hidden fees, weak support, and renewal traps - with what a good answer versus an evasive one sounds like. Take it into the meeting.
Board Reporting Pack Template
A board-ready risk pack skeleton - one-page summary, heat map, top risks, and actions - annotated with what a NED actually reads versus what gets skipped.
RCSA Methodology Pack
The four structural decisions you cannot undo later, a sample taxonomy you can lift, and scoring calibration definitions - the genuinely hard part done for you.
Provision 29 Readiness Pack
Material control tagging explained plainly, a readiness tick-list against the requirement, and the evidence a board or regulator will expect to see.
Spreadsheet-to-Platform Migration Pack
A phased migration plan template, an honest view of what actually breaks (people, not data), and a realistic parallel-run timeline.
Not sure where to start?
Take the RCSA Maturity Scorecard. In 10 minutes you'll know exactly where your framework stands and which of these tools will help you most.
Take the scorecard