Risk assessment
A risk review built for your industry.
A guided risk assessment based on ISO 31000, with questions tailored to your industry. It turns your answers into a scored risk picture and a prioritized action plan.
The problem
- The annual risk review is a generic spreadsheet that doesn’t fit how your organization works.
- It’s done once, filed away and rarely revisited.
- Leadership can’t see where the real exposure is, or what to fix first.
How it works in PRIAM
From questions to a prioritized plan.
Step 1
Answer questions for your industry
The question set is chosen by your industry (NAICS code), so you skip what doesn’t apply. Work through it by risk area on the assessment wheel, and save your progress at any time.
Step 2
See where you stand
Results show an overall risk score, a heatmap of likelihood and impact, and scores by category, from cyber and operational to regulatory, financial and strategic. Categories are weighted for your sector.
Step 3
Act on prioritized recommendations
Get recommendations for your industry and maturity level, prioritized from critical to low, each with implementation steps. When you’re ready, publish the results so staff can read them.
Industries with tailored questions
- Electric utilities
- Paper converting
- Basic chemical manufacturing
- Specialty food retail
- General and specialized freight trucking
- Software publishers
- Insurance agencies and brokerages
- Architecture and engineering services
- Individual and family services
- Vocational rehabilitation
Other industries use the questions for their broader sector.
Who uses it
- Owners and leadershipRun the assessment, typically once a year or after a significant change.
- Managers and administratorsAnswer questions in their areas when the owner gives them access.
- EveryoneReads the results once they’re published.
Questions
What if our industry isn’t on the list?
PRIAM uses the questions for your broader sector. We can show you what that looks like in a walkthrough.
Can we stop and come back later?
Yes. Answers save as you go, and you can pick up where you left off.
How long are results kept?
Results stay available for six months. Assessments are then deleted automatically, so old answers about your risks don’t pile up.
See the risk assessment for your industry.
In a 30-minute walkthrough we’ll go through PRIAM’s risk questions for organizations like yours together.