Use Case

Risk assessments linked to the evidence that shows controls work

Risk registers with live control effectiveness evidence. Every risk assessment linked to the operational records that prove mitigation is working — not just planned.

-40%Risk control gaps at audit
Start Free Trial

30-day free trial · Private deployment included · Cancel anytime

The problem

Risk assessments documented in systems disconnected from operational evidence cannot be verified. When a control is listed as "in place," there should be operational evidence to prove it.

  • ×Risk registers updated annually but control effectiveness not verified between updates
  • ×Control evidence stored separately from the risk register, requiring manual linking
  • ×Risk reassessment after incidents reveals controls that existed on paper but not in practice

The solution

How Certexi solves it

  • Risk register with live control links: every control linked to the operational evidence proving it works
  • Control monitoring workflow: check → evidence → update risk register automatically
  • Post-incident risk update workflow: reassess affected risks with new evidence built in

Platform capabilities

What Certexi provides for operational risk assessment

Risk register with likelihood, impact, and residual risk calculations
Control library linked to operational evidence from daily workflows
Control effectiveness monitoring with evidence-linked assessment
Risk-to-incident linking: every incident attached to the risks it manifested
Management review reporting: risk status with evidence summary for leadership

Sector coverage

Industries that rely on operational risk assessment

Manufacturing & OperationsConstruction & InfrastructureEnergy & UtilitiesHealthcare & PharmaOil & GasMining & ResourcesGovernment & Public Sector

Compliance support

Regulatory frameworks this use case supports

ISO 31000ISO 9001ISO 27001COSO

PRECIOS

Alineado al Valor Operativo, No al Número de Usuarios

El precio depende del alcance del despliegue, no del número de usuarios. Tus datos. Tu infraestructura. Tus reglas.

Todos los planes incluyen despliegue privado. Tu información permanece en tu infraestructura.

ISO 27001 Aligned
Private Deployment
Unlimited Users

Piloto

Valida antes de comprometerte

Personalizado

5 lugares por trimestre

  • Despliegue completo de plataforma
  • Soporte de configuración
  • Capacitación e incorporación
  • Acceso directo al equipo de producto
  • Iteración basada en retroalimentación
  • Período de evaluación de 8 semanas

Estándar

Operaciones de una ubicación

Desde $2,500

por mes, facturado anualmente

  • Todas las capacidades centrales
  • Biblioteca de plantillas estándar
  • Despliegue privado incluido
  • Soporte por email (respuesta 24h)
  • Actualizaciones trimestrales
  • Usuarios ilimitados

Enterprise

Multi-ubicación, alto cumplimiento

Personalizado

Basado en alcance del despliegue

  • Todo lo de Estándar
  • Desarrollo de plantillas personalizadas
  • Ingeniero de soporte dedicado
  • Garantías SLA
  • Integraciones avanzadas
  • Opción de despliegue air-gapped

Despliegue Privado Incluido en Todos los Planes

Cada plan incluye despliegue completo en tu infraestructura — Nextcloud, servidores Linux, Docker, Kubernetes o entornos air-gapped. Tu información nunca sale de tu control.

Risk registers backed by evidence, not just intentions.

Start with a 30-day free trial. Private deployment included.

Start Free Trial