Compliance

Add a risk to the register, score its inherent and residual exposure on a 5×5 matrix, assign an owner and treatment, and link the controls that treat it.

Schedule recurring risk reviews, record a review to update residual exposure and the history timeline, and respond to due and overdue reminders.

Understand how likelihood and impact combine into a 1 to 25 risk score, how scores map to level bands, and how to read the heatmap across layers.

Define the highest residual risk level your organization will tolerate, with optional overrides per category, so risks above appetite are flagged automatically.

Formally sign off a risk you choose to tolerate, with a rationale and an optional expiry, and keep an auditable acceptance history.

Record the exposure you are aiming for after treatment so every risk shows an inherent, residual, and target level you can compare.

Bring an existing risk register into ISO Mate from a CSV file, with a dry run that validates every row before you commit the valid ones.

Ask natural language questions about your published policies and procedures in the AI Assistant My Data tab, read answers with source citations, and filter by document type.

Generate policy drafts from an instruction and refine existing text with quick actions or custom instructions, using the AI Assist panel built into the ISO Mate policy editor.

Scaffold a compliance framework from a built-in template or build one from scratch, add requirements, and track your compliance posture in ISO Mate.