The risk toolkit
Free tools, templates, and packs for Heads of Risk - from diagnosing your framework to building the business case and choosing the right platform. Built from doing the job, not describing it.
Diagnose
Build the case
Business Case Template for Risk Tooling
A fill-in-the-blanks workbook to get budget approved. Problem statement, cost-of-inaction model, objection handling by stakeholder, and a one-page board summary.
RCSA Methodology Pack
The four structural decisions you cannot undo later, a sample taxonomy you can lift, and scoring calibration definitions - the genuinely hard part done for you.
Procure
Total Cost of Ownership Calculator
See the real three-year cost of a GRC tool, not the licence sticker price. Factor in implementation fees, internal admin time, and renewal uplift.
GRC Tool Shortlist Pack
A weighted scoring grid to compare vendors side by side - UX, deployment speed, first-line adoption, reporting, price, and references. Score three tools, get a number.
Contract Red-Flags Guide
The clauses that bite - auto-renewal windows, data-exit fees, weak SLAs, uncapped price uplifts. With the exact question to ask the vendor for each.
Vendor Demo Question Bank
The questions that expose hidden fees, weak support, and renewal traps - with what a good answer versus an evasive one sounds like. Take it into the meeting.
Deliver
Example Risk, Control and Action Registers
Worked example registers you can lift and edit - a risk register with taxonomy, a control library, and linked actions. Built the way a live framework actually looks.
Board Reporting Pack Template
A board-ready risk pack skeleton - one-page summary, heat map, top risks, and actions - annotated with what a NED actually reads versus what gets skipped.
Provision 29 Readiness Pack
Material control tagging explained plainly, a readiness tick-list against the requirement, and the evidence a board or regulator will expect to see.
Spreadsheet-to-Platform Migration Pack
A phased migration plan template, an honest view of what actually breaks (people, not data), and a realistic parallel-run timeline.
Not sure where to start?
Take the RCSA Maturity Scorecard. In 10 minutes you will know where the framework stands and which of these tools will help.
Take the scorecard