Why Reviews Matter
Residual exposure changes as your controls mature and your environment shifts. Regular reviews keep every risk score current and give auditors a clear history.
Set a Review Cadence
On the risk form, choose a review frequency of monthly, quarterly, annually, or ad hoc. ISO Mate uses this cadence to schedule the next review date each time you record a review.
Record a Review
- Open the risk and click Record review.
- Rate the current likelihood and impact from 1 to 5.
- Add notes describing what changed.
- Optionally set an explicit next review date, otherwise ISO Mate calculates it from the cadence.
- Save. The residual score, level band, and over appetite flag update, and the review is added to the history timeline.
Reminders
Risk owners are notified when a review is coming due and again when it becomes overdue, so nothing slips through the cracks.