Risk register software with heat map

Features

What you do with Risks & opportunities

Configurable heat map

Likelihood and impact are scored on a 5×5 matrix by default. An administrator can choose 3×3, 4×4 or 5×5, custom labels, multiplying or adding, and a threshold and colour per level.

Expected or assessed residual risk

A new residual risk starts as expected. Only an evaluation that confirms the effect makes it assessed, so an estimate never passes for a proven result.

Risk acceptance with a rationale

When you accept a risk deliberately, you record the reason, acceptance threshold, approver, residual risk, validity and next evaluation. When the acceptance expires, a warning appears.

Evaluations with full history

Set an evaluation frequency and the next date is scheduled for you. Each evaluation is kept as a separate record, with the previous and new score and the effectiveness verdict.

Measures as actions

Tick the option to add an additional measure to the action list and it appears as an action with an owner and deadline. A risk can only be set to controlled once those actions are closed.

Dashboard and standards links

Build your own dashboard with clickable tiles, such as high and critical risks or expiring acceptances. Link risks and opportunities to your active standards and filter on them in the list, heat map and dashboard.

In practice

How it works

1
Record
Add a new risk or opportunity, choose the type and fill in the owner (a role), title, domains, likelihood and impact. Risks also come in from the context analysis, the risk assessment, MoC and audit findings.
2
Work it out
On the detail page you describe the cause, possible event and consequence, existing and additional measures, the residual risk and links to standards, processes and projects.
3
Follow up
Additional measures run as actions in Actions. The detail page shows the owner, deadline and status of every linked action.
4
Evaluate
When you start an evaluation, you record a new score, the effectiveness of the measures and any follow-up actions.
5
Status with a rationale
Controlled, accepted or realised is only possible once the rationale is complete. The detail page then shows why the risk is controlled or what the opportunity delivered.

Standards and legislation

Where it helps you

BrydgeOne contains no text of the standards. Here you see which topics from standards and legislation this module helps you with.

ISO 9001

The register with assessments, measures and evaluations serves as evidence for clause 6.1.

ISO 14001

Environmental risks and opportunities sit in the same register and count as evidence for clause 6.1.

ISO 45001

Key risks from the risk assessment can be promoted to this register, which serves as evidence for clause 6.1.

One platform

Works together with

Every module works on its own. Switch on more and they fill each other in automatically.

ActionsControl measures become actions; open actions block closure ContextContext factors become a risk or opportunity in one click Risk assessment & action planRisk assessment risks can be promoted to the central register TRATRA risks can be promoted to the central register Management of ChangeRisks of a change land in the register StakeholdersStakeholder requirements become a risk or opportunity AuditsRisks steer audit planning; findings create or raise risks Management reviewTop risks and counts feed the management review ProcessesRisks are linked to processes and process steps Standards frameworkRisks are linked to standards and clauses Objectives & KPIsObjectives refer to the risks they address Hazardous substancesHazardous substances refer to risks in the register

Knowledge base

Read more about Risks & opportunities

Implementing ISO 45001: a step-by-step plan for safe and healthy workISO 45001 is the international standard for an occupational health and safety management system. It helps you prevent accidents and work-related ill health rather than only recording them afterwards. This step-by-step plan shows how to put the standard into practice, from the first baseline to certification. How to prepare a risk assessment (RI&E): a step-by-step guideThe RI&E, the Dutch risk inventory and evaluation, is the foundation of your occupational health and safety policy. You map out the risks in your organization and what you do about them. This step-by-step guide helps you build an RI&E that is accurate, usable and kept up to date. Recording and analysing incidents and near missesEvery incident and near miss tells you something about how safe your work really is. You can only learn from it if it is reported, recorded and analysed. This article shows a practical way to do that. TRA task risk analysis: steps, example and who approves itA TRA, or task risk analysis, is an analysis of one specific task that you prepare before the work starts. You split the task into steps, look for the hazards per step and choose control measures. Here you read how that works, with a worked example and an answer to the question of who approves a TRA. RI&E example: a worked risk assessment for a small or mid-sized companyAn RI&E example shows in a few minutes what ten pages of explanation cannot: how risks, scores and measures fit together. Below we work out a risk inventory and evaluation (RI&E) for a fictional small company that supplies and installs products. Incident investigation: finding the root cause with the 5 whys methodIncident investigation starts with a simple question: why did this happen? If you keep asking it, you often end up at a cause in how the work is organized rather than at the person who happened to be there. Below you can read how that works in practice. Registering and reporting a work accident: what employers need to doWhen there is a work accident, you handle reporting and recording on two tracks: you document every accident internally, and for serious accidents you also notify the authorities. Below you can read what you always do, how to investigate and where to check the current reporting rules. Analyzing context and stakeholders: approach with a worked exampleThe context of the organization consists of the internal and external factors that decide whether your management system achieves its purpose, plus the parties that expect something from you. A clear analysis shows which risks and objectives really matter. Setting up a risk and opportunity register and keeping it aliveA risk and opportunity register is the list in which you record what can threaten or help your goals, how big that is and who does something about it. Below you read how to set it up, rate entries and stop it from turning into a dead list. Management of Change: a step-by-step plan for controlled changeManagement of change (MoC) is the way you roll out changes to machines, processes, suppliers or organization in a controlled manner, so that an improvement does not become a new hazard. This plan runs from request to evaluation, with examples and pitfalls. How to make a risk matrix: example with scales, colour zones and worked scoresA risk matrix is a table in which you determine risk as likelihood times effect: you score the likelihood, score the severity of the consequence and read the result in a colour zone. You build one by first defining both scales in concrete terms, then linking a fixed action to each colour and scoring every risk again after the measures. Below you will find the steps, example scales and a worked example. Choosing RI&E software: what should an RI&E tool be able to do?Good RI&E software lets you carry out the RI&E digitally and keep it up to date: take inventory per department, assess risks on a fixed scale, follow up measures with an owner and deadline, and have the RI&E reviewed. An RIE tool is more than a form to fill in, because the value lies in follow-up and repetition. Whether your RI&E must be reviewed, and with which instrument you work, depends on your organisation. How to carry out an FMEA: steps, example and the RPN explainedFMEA (failure mode and effects analysis) is an analysis you carry out in advance: for each process step you determine what can go wrong, what the consequence is and whether you notice it in time. You do it by naming failure modes, effects and causes, scoring severity, occurrence and detection, calculating the risk priority number (RPN) and choosing measures. Below you will find the steps, an example of a process FMEA and the pitfalls of the RPN.

Glossary

Terms related to Risks & opportunities

Bowtie methodBowtie method (bow tie analysis)Context of the organisationContext of the organisation Management of ChangeManagement of Change Preventive actionPreventive action Residual riskResidual risk Risks and opportunitiesRisks and opportunities Risk matrixRisk matrix

Frequently asked questions

Questions about Risks & opportunities

How is this different from the RI&E risk assessment?

The RI&E is the statutory Dutch health and safety assessment at workplace level. This register is the strategic list of risks and opportunities for the management system; you promote important RI&E risks to it without keeping a second list.

Can we use our own risk matrix?

Yes. An administrator sets the matrix size (3×3, 4×4 or 5×5), the labels, the scoring method and a threshold and colour per level. Existing risks and opportunities are reclassified straight away.

What happens when a risk acceptance expires?

The risk is flagged as having an expired acceptance that needs evaluation, and it counts in the KPIs and filters. An acceptance never quietly carries on.

Why is the owner a role rather than a person?

Ownership belongs to the role, so the register stays correct when staff change. You assign people as responsible for the actions that follow from a measure.

Start small

Start with just Risks & opportunities and expand when you want

You do not have to set up everything at once. Switch this module on, add other modules later and keep using the same data and the same app. BrydgeOne fits every organisation, from a small company to enterprise, and you only pay for what you switch on, from € 49 per month.

Risks & opportunitiesStart hereActionsAdd laterContextAdd laterRisk assessment & action planAdd laterTRAAdd later

See Risks & opportunities in your own situation

You only pay for the modules you switch on, from € 49 per month. In a demo we show how it works with your own processes.

Book a demo See pricing

Safety

More modules

Incidents & reportsLog incidents and turn them into follow-up. Workplace inspectionsCarry out inspections with clear checklists. LMRALast-minute risk analysis before the job. Toolbox talksShare toolbox talks and record attendance. Certificate managementTrack the validity of diplomas and inspections. Skills matrixKeep skills and training up to date.

All 46 modules