Best IT Risk Management Software - Page 11

PATHMap

PathMap is a behavioral risk intelligence platform that maps how decisions, actions, and workflows translate into security outcomes.

Perium

Perium is the all-in-one platform for risk management. In no time at all you will be equipped with an intuitive and flexible system for risk management and reporting. From now on, meet all standards for security, privacy, and digital resilience. Protect the data of your employees, customers, suppliers, and your organization quickly, simply, and smartly with Perium. Standards available (new ones added continuously): ISO27001, ISO27002, BIO, NEN7510, NTA7516, NEN7512, NEN7513, ISO27701, HKZ, ISO9001, ISO50001, DigiD, DNB Good Practice, BIC, ISQM, PCI-DSS, Suwinet, Wpg, IBP Onderwijs, NIS2 Directive, DORA, PIMS, ISMS, NCSC Handreiking, NIST CSF, NIST AI, NVZ Gedragslijn, Cloud Control Matrix, Horizontaal Toezicht

PiiQ Risk

PiiQ Risk SaaS PPiiQ’s ‘Risk Product’ is tailored to each unique clients’ needs through proprietary AI open source technology that aggregates the most cutting edge data online instantly, with just a name or active directory. Poised to instantly support CISO, CSO, CTOs, IT & Security teams as well as HR & People Professionals, this technology delivers a score in an easy to swallow pill that is optimized for instant reporting. Our product features over 50 + combined ways to manipulate data into eye pleasing infographics and icons, making it completely customizable and universal for all business verticals and user proficiencies! PiiQ Intel SaaS & Consulting Our PiiQ ‘Intel Product’ uses the same open source AI driven, top secret government collection & scrape methodology, however focuses in on Social & Paid Media branding, audience sentiment, influencer audience insights, brand influence, follower loyalty, demographics & geography view through, by simply entering a company or competitor name or product. PiiQ Background Investigation SaaS & Consulting Complete Open Source Scrape, instantly insight of candidate history online with just a first and last name and current location.

Prime Security

Your company has spent millions accelerating engineering with tools like Cursor and Claude. But without security keeping pace, you haven’t eliminated the bottleneck, you’ve just moved it, while increasing organizational risk. Prime fixes this. Prime equips Product Security teams with AI Agents that secure development from design to delivery. As planning begins, Prime reviews PRDs, tickets, and architecture changes to identify risks and generate the security, privacy, and third-party controls requirements before development starts. As code is written, Prime validates implementation through automated code reviews, ensuring those controls are enforced before anything reaches production. With Prime, security finally scales with engineering, so your organization can innovate at full velocity without compounding risk.

PrivIQ Operational Risk Management

PrivIQ Risk Assessment helps organisations build and manage tailored risk and compliance frameworks in one audit-ready platform. Designed for risk teams, compliance officers, consultants and public-sector organisations, PrivIQ provides a configurable engine for managing controls, criteria, policies, assessments, risk registers, evidence, tasks and reporting. The platform can be shaped around your organisation, industry, regulator or methodology, making it suitable for GRC, operational risk, HSSE, EIA, cybersecurity, sector-specific compliance and consultant-branded frameworks. With AI-assisted, human-approved workflows, PrivIQ supports the creation of controls, assessment criteria, policies and remediation tasks while keeping your team in control of review and approval. Teams can create tailored assessments, apply severity and likelihood scoring, manage inherent and residual risk, assign owners, track treatment plans and maintain review cycles. Instead of relying on spreadsheets, static checklists or disconnected tools, PrivIQ gives organisations a structured way to manage risk from assessment through to action. Evidence, recurring tasks, reassessments, attestations, control testing and board-facing reports can all be managed in one place. PrivIQ is built for teams that need flexibility without losing structure. Whether you are managing an internal risk framework, delivering a consultant-branded methodology or building a partner-specific compliance solution, PrivIQ helps turn complex risk requirements into a practical, repeatable and auditable programme.

Proactive Resilience

Proactive Resilience by Prewave is an advanced solution designed to enhance supply chain robustness by proactively identifying and mitigating potential risks. Leveraging artificial intelligence, it processes data from over 1.3 million suppliers, offering real-time insights into financial health, operational stability, and environmental factors that could disrupt supply chains. This enables businesses to anticipate issues and implement targeted strategies to maintain operational continuity.

Proteus GRCyber

Quest Enterprise Reporter Suite

Enterprise Reporter Suite helps you keep your Microsoft environment, both on premises and cloud-based, secure and compliant. Comprehensive access assessments and built-in reporting provide deep visibility into Active Directory (AD)/Azure AD, Exchange/Exchange Online, Office 365, Azure, OneDrive for Business, Windows Servers, SQL Servers and NAS/SAN storage, including Azure resources, users, groups, permissions and other configurations.

Quest Knowledge Portal

Knowledge Portal facilitates scheduled and ad hoc reporting, all at once or granularly, in order to gain a complete business summary into IT. The portal allows users to view only those reports for which they are authorized. Using a simple, Web-based portal, you'll be able to quickly access the tool's predefined and customizable reports and begin gaining value.

R-Check

R-Check is a software tool that checks software for compliance with specifications. It is special in providing cross language reasoning capability and in being able to make strong inferences when reasoning about partial code.

ReadiNow

ReadiNow enables highly regulated organizations to rapidly build digital solutions to ever-changing business problems. The ReadiNow GRC platform allows businesses to swiftly automate risk management processes and improve productivity across the organization. This no-code platform democratizes solution development by allowing business experts to build their own solutions, to manage the ever-changing risk and compliance landscape.

Redjack

Redjack delivers cyber resilience by providing total visibility of assets and dependencies with AI-powered business insights. Our advanced platform delivers objective data to align priorities across IT, security, and risk. Customers rely on Redjack to safeguard critical business functions, meet evolving regulations, and transform digitally with confidence. Trusted by government agencies, Fortune 500s, and leading enterprises, Redjack monitors over 8% of the public Internet. Our mission is to build resilience through evidence. The future is visible with Redjack.

Risk Assistant

RISKINDEEP

Rizzqo

Rizzqo is asset-first Compliance Execution for regulated organizations. It turns security and regulatory frameworks into concrete work on the assets they affect, assigns that work to the people responsible, and shows ISMS teams and CISOs how compliance is actually implemented across the organization. Most compliance programs are built top-down. Frameworks become controls, controls become policies, and security teams are left trying to find out whether those policies are actually implemented anywhere. A policy is not proof of implementation. Rizzqo adds the execution layer. You model your organization once: the critical services, information and processes you need to protect, the applications, systems, infrastructure and providers they depend on, and who is responsible for each. Controls are translated into requirements that are specific to the type of asset they apply to. When an asset is added or classified, the requirements that apply to it appear automatically and are assigned to its owner. The owner answers each requirement, attaches evidence and confirms the answer. Implementation status, evidence, gaps and risks then roll back up to management. Key capabilities: Asset and dependency model: critical services, information, processes, supporting assets and responsible owners in one connected structure. Frameworks and controls: ISO 27001, ISO 27002, NIS2, DORA, GDPR, EU AI Act, CRA, TISAX, ISO 21434, ISO 27017, MVSP, NIST CSF 2.0 and RL CySec-Rail, plus your own company-specific frameworks and requirements. Asset-specific requirements: applied automatically based on asset category, assigned to responsible owners, answered and evidenced where implementation happens. One requirement can satisfy controls from several frameworks, so the same work is not repeated per framework. Evidence and implementation status: evidence attached to the requirement on the asset, answers confirmed and logged, status calculated from what has actually been answered rather than self-declared. Gaps and risk: open requirements are visible as gaps. Gaps can be documented as risk assessments with inherent, current and residual scoring and a treatment decision, so unfinished work becomes a conscious management decision instead of hidden debt. Tasks: remediation work assigned and tracked, with Jira integration. Management visibility: dashboards showing framework readiness, open gaps and which critical services are exposed by them. Privacy and AI context: PII flows made visible in the dependency model, with processing purpose and legal basis captured on supporting assets. AI assets identified in the same model and assigned an AI risk class. Who it is for: ISMS managers and information security managers who run the program day to day, and CISOs who need a reliable view for management. Strongest fit: regulated mid-sized organizations with several frameworks, responsibility spread across many teams and asset owners, complex asset environments and limited compliance headcount. Rizzqo GmbH is based in Lindau, Germany. The platform is built and hosted in Germany.