Documentation
Policies
16SOPs
41Templates
7Registers
9Runbooks
6Governance
ISMS Core
Risk Management
Internal Audit
Mgmt Review
Compliance
ISO 27001:2022
SOC 2 Type II
AI Governance
Evidence
Evidence Collection
Incidents
Technical
Architecture
System
Audit Log
Settings
Cognium Inc.
ISMS Portal v2.0
Risk Management
Track and manage information security risks
- Total Risks
- 10
- High/Critical
- 0
- Residual score ≥12
- Mitigating
- 9
- Accepted
- 1
- Risk Reduction
- 55%
- From controls
- Avg Residual
- 6.4
- vs 14.2 inherent
10 risks
Risk ID
RSK-005
Title
Key Personnel Dependency
Category
Status
Inherent
Residual
Owner
Patrick Horend
Treatment
Risk ID
RSK-008
Title
Phishing Attack on Remote Workers
Category
Status
Inherent
Residual
Owner
Pio Greeff
Treatment
Risk ID
RSK-001
Title
AI Model Training Data Poisoning
Category
Status
Inherent
Residual
Owner
Gurmat Dusanjh
Treatment
Risk ID
RSK-002
Title
Unauthorized Access to Client Investment Data
Category
Status
Inherent
Residual
Owner
Pio Greeff
Treatment
Risk ID
RSK-004
Title
Regulatory Non-Compliance
Category
Status
Inherent
Residual
Owner
Pio Greeff
Treatment
Risk ID
RSK-003
Title
Third-Party Vendor Security Breach
Category
Status
Inherent
Residual
Owner
Pio Greeff
Treatment
Risk ID
RSK-006
Title
AI Model Drift Leading to Incorrect Recommendations
Category
Status
Inherent
Residual
Owner
Vibin Thomas
Treatment
Risk ID
RSK-009
Title
Intellectual Property Theft
Category
Status
Inherent
Residual
Owner
Harvey Toor
Treatment
Risk ID
RSK-007
Title
Data Loss from System Failure
Category
Status
Inherent
Residual
Owner
Abishek Malani
Treatment
Risk ID
RSK-010
Title
Service Availability Disruption
Category
Status
Inherent
Residual
Owner
Abishek Malani
Treatment
Risk Heat Map
RSK-005
RSK-008
RSK-003
RSK-006
RSK-001
RSK-002
RSK-004
RSK-007
RSK-010
RSK-009
Low (1-5)
Medium (6-11)
High (12-19)
Critical (20-25)