Run an RCSA in days, with the discussion and the report in the same place.
Assessments run directly on the risk and control registers. Checklists, scoring, threaded review with the business, and a generated PDF report, without the spreadsheet that usually goes back and forth eleven times.
AML-C-001: two STRs in August filed on day 6. Marking partial until the new 5-day window is reflected in the SOP.
Agreed. SOP update is in review (POL-0115 v2.5). Can we re-test in October?
RCSAs run on spreadsheets
The assessment lives in a workbook emailed between the second line and the business. By the end nobody is sure which copy has the latest scores.
Discussion detached from the risk
Questions about a specific control are answered in email, Teams or a meeting, and the reasoning never makes it into the record.
Reporting as a second project
Once the scores are in, someone rebuilds them into a management report by hand, and does it again for the next business unit.
Every assessment you own, in one queue
Consultants and second-line teams open the Assessment hub to find the assessments assigned to them, by client or business unit, with status and due date. Each assessment is scoped to a set of risks and controls from the registers, so there is nothing to re-key.
- Scope an assessment from the risk and control registers
- Assign owners, reviewers and the business respondents
- Role-specific task inboxes show each person their work
Rate the control, score the risk, discuss it on the spot
The Checklist tab walks through each control; the Risk scoring tab records inherent and residual ratings on your scale. Threaded comments attach to the specific risk or control, with unread tracking and jump-to-risk navigation, so the second line and the business resolve questions where the evidence is.
- Control effectiveness ratings with evidence attached
- Inherent and residual scoring on configurable scales
- Threads on each risk, visible to the client and the reviewer
The report writes itself, and the next one too
Each assessment generates a PDF report with scope, ratings, residual risk against appetite and the actions raised. RCSA Reports gives management the view across all assessments, searchable and filterable by status, business unit or client. For consulting firms, reports carry the client's branding.
- One PDF per assessment, generated on demand
- Cross-assessment management view
- Actions tracked through to closure
Sarah K. · 42 controls30 SepIn progress
Priya N. · 28 controls30 SepReported
James W. · 35 controls30 JunReported
Rahul M. · 51 controls30 JunReported
Run many clients' assessments from one login.
Each client is a separate workspace with its own registers, respondents and branding. Your consultants see one Assessment hub across all of them; your clients see only their own. The consultant page explains the model →
Multi-client
Separate workspaces, one hub, one set of templates.
White-label reports
Reports carry the client's logo and colours, not yours.
Engagement in days
Scope from the registers, invite respondents, start.
Evidence retained
Threads, ratings and documents stay with the assessment.
Retire the RCSA workbook.
The trial includes one in-progress assessment, so you can see scoring, comments and the report on day one.