Skip to content
Close
SEARCH
CONTACT
E-MAIL: info@humanrisks.com
Book a Demo
E-MAIL: info@humanrisks.com
Book a Demo
Risk Assessments
Incident Reports
Questionnaires
Tasks
Business Continuity Management
Business Impact Analysis
Business Continuity Plans
Crisis Management
Mass Communications
Manufacturing
Banking & Financial Services
Critical Infrastructure
Pharmaceuticals
Facility Management
Professional Services
Security Templates
Risk Assessment
Webinars
Whitepapers
Insights
Customer Cases

Security risk assessment software for physical sites and assets

Standardise and optimise your risk assessments with AI powered automations
Risk Assessments mockup, floating@1x-1
Risk Assessment Threats, floating@1x
Overview

Standardise your processes

Inconsistent risk assessments make it hard to compare risk across sites and slow you when the audits come around. Keep your risk assessment uniform, always up to date and in one place. Pre-define asset types, threats and treatment templates in line with your company’s policies and standards and match them to different site categories to save time and cut cost.
Data

Get a complete overview of the data

Scattered spreadsheets mean nobody truly knows your real risk exposure until it’s too late. By consolidating these in the Human Risks platform, you can assign and monitor costs, track mitigation measures, and watch threat and residual threat levels update in one place. Attach relevant files, see everything colour-coded and easy to read, and export a PDF report whenever you need one.

Risk Assessment Treatments, floating@1x-1
Risk Assessment Intelligence & Incidents, floating@1x
Ownership

Enable your team

A risk assessment process only pays off if the people expected to use it actually do. Teams quietly abandon a tool that’s hard to use within the first few months, and take the whole programme built on top of it down with it. We built the Risk Assessment module to be easy for anyone to use, which is why security teams at global organisations use it on a daily basis.

15min BASE SRA
90% LESS MANUAL WORK
96% CUSTOMER RETENTION

How does it work?

Every organization runs risk assessments a little differently, and Human Risks adapts to your internal standards, not the other way around. But if you're looking for a starting point, here's how it works:

1
Set it up
Assign asset type, site category, sub-assets, an owner, and add whatever else a proper risk assessment calls for.
2
Assign threats
Pick from suggested threats, pull from your threat library, or create new ones. Mark some as mandatory so nothing gets skipped.
3
Treat the risk
Assign treatments and watch the risk matrix, implementation status, and costs update as you go.
4
Stay ahead of it
Monitor relevant incidents and intelligence in real time, with customisable notifications.
5
Turn it into action points
Create tasks straight from the assessment, assign them to people or roles, and track issues as they’re resolved.
6
Keep the record straight
Link files, track every change, review and comment. Keep everything in one place, to stay on top of everything and ensure compliance.

Discover the Risk Assessment module

Risk Assessments mockup@1x-1
Risk Overview on the Human Risks Platform

Identify Threats

Identifying the right threats is the backbone of any risk assessment.

In the Threats tab you have all the tools necessary to build that foundation. Human Risks matches AI-suggested threats to the specific risk profile of your assessment, so you start from relevance, not a blank page. Pull pre-formatted threats from your threat library and tune them to fit the assessment at hand or create a new threat from scratch when nothing existing quite covers it.

Every threat comes with visualized data you can track in detail, threat level, risk level, and residual risk, both individually and rolled up across the entire risk assessment. That way, you always know not just what could go wrong, but how seriously, and what’s left once mitigations are in place.

Implement Treatments

Identifying threats is only half the job. Mitigation is the core of successful security risk management.

In the Treatments tab you can import suggested treatments that the platform automatically matches to the assessment’s site category, asset type, threat types, and country, or create your own when you need something specific. From there, you can assign the effects of each treatment to each threat, track the costs and savings, monitor implementation status, both treatment by treatment and across the assessment as a whole, and keep every deadline visible, so nothing slips through.

Treatment Suggestions on the Human Risks Platform

What else can you expect?

Switching tools is never just a technical change. It often is a habit change, and habits are hard to break. Even the best solution falls flat if your team will not use it. This is why onboarding is an integral part of the product from the get-go, rather than merely an afterthought.

We first start by understanding how your team works and then configure the platform to fit your needs. From there, we train you and your team hands-on, so everyone knows exactly where to go and what to do. And once you’re live, we don’t disappear. We stay close, ready to help you work through anything that comes up as your team settles in.

Our platform keeps evolving, and we make sure you’re never caught off guard by it. You will have access to our roadmap, so new updates are something you can expect. Training material and a full knowledge base are readily available, and step-by-step tutorials built right into the platform walk you through any new feature as it lands. And if something doesn’t fit how your team works, you can turn off individual functionalities or entire modules in settings.

How can you easily demonstrate the value of your security risk management programme? If you want to quantify progress, justify resource allocation, or give leadership the visibility they need to support continued investment, you can generate comprehensive, stakeholder-ready reports directly from your risk assessment data with no manual compilation required. Simply select the elements of a Risk Assessment relevant to your audience and export a polished report in seconds.

You can tailor reports for different stakeholders, from operational teams tracking treatment progress to executives assessing overall risk posture.

Reporting isn’t limited to individual assessments. You can consolidate data across your entire risk register, including treatments, tasks, and open issues, to produce a comprehensive view of risk exposure and mitigation status.

Compliance shouldn’t rely on someone remembering to double-check things. Our solution supports a multi-level review and approval process, so nothing moves forward until someone has properly checked it.

Turn on the review process and items route automatically for review. The platform flags issues, suggest corrections, and approvals happen without anyone having to chase them down. Role-based access adds another layer of control. Each user gets a level of authority that matches their responsibilities, so only the right people can see or edit sensitive data. That means no one can accidentally edit, approve, or delete something they shouldn’t be touching, and critical data stays in the hands of the people who are supposed to manage it.

Human Risks tracks every change automatically, down to who made it and when. This gives you a complete, defensible audit trail, ready for when an auditor, regulator, or executive asks for it.

See a base security risk assessment
completed in 15 minutes

A live demo of Human Risks, built around your sites, threats and continuity plans.

Trusted by GSK, HSBC and IKEA · ISO 27001 certified

Book your demo

From assessment to action

Risk assessments sit at the centre of your security risk management program. Every finding connects to the rest of the platform. Check out our integrated modules.

Incident Reports, square@1x
TOUCH
Incident Reports
Incident Reports

Keep an eye out on any relevant incidents and leverage external intelligence data for more comprehensive risk view. 

Read More
Tasks, square@1x
TOUCH
Tasks
Tasks

Turn your findings into actionable steps with clear ownership and an audit trail.

Read More
Questionnaires, square@1x
TOUCH
Questionnaires
Questionnaires

Collect relevant data with custom questionnaires both internally and externally. 

Read More

Frequently Asked Questions

What is the Risk Assessment module? The Risk Assessment module is where your team identifies threats, assigns treatments and tracks risk across every site and asset. It supports an ISO 31000 aligned approach and keeps each assessment, with its threats, treatments and history in one place. You can compare risk across sites and prepare for audits from a single record.
What is a baseline Security Risk Assessment (SRA)? A baseline Security Risk Assessment (SRA) is a first, standardised assessment of a site or asset. It sets the reference point for every review that follows. With Human Risks, you can get your baseline SRA ready in around 15 minutes, with 90% less manual work, thanks to smart AI integrations. Your team then refines it to reflect local conditions and company policy.
How do AI threat suggestions work?

In the Threats tab, Human Risks suggests threats that match the risk profile of the assessment. You add the ones that apply and adjust them to fit. You can also pull threats from your threat library or create new ones. Threats your organisation marks as mandatory are always included, so nothing gets skipped.
Does AI replace the judgement of my security team?

No. AI only suggests, with your team's supervision. A person needs to accept, edit or reject every threat and treatment the platform proposes, and Human Risks logs each change, down to who made it and when. Your security professionals stay accountable for the assessment, and auditors can see how each decision was made.
How are treatments suggested?

In the Treatments tab, the platform matches suggested treatments to the assessment’s site category, asset type, threat types and country. You import the ones that fit or create your own, then assign the effect of each treatment to each threat. Risk levels, costs and implementation status update as you go.
Can the module follow our own methodology?

Yes. Human Risks adapts to your internal standards. You pre-define asset types, threats and treatment templates in line with your company policies, then match them to site categories. Every new assessment starts from that foundation.
Can I create reports from a risk assessment?

Yes. Select the elements relevant to your audience and generate a customisable report in a couple of clicks, or download any assessment as a PDF. You can also consolidate data across your risk register, including treatments, tasks and open issues, to see risk exposure across the organisation.
How does the module support audits and compliance?

Multi-level review and approval routes each item to the right people before it moves forward. Role-based access controls who can see or edit sensitive data. Human Risks records every change, down to who made it and when, which gives you a defensible audit trail for any auditor, regulator or executive who asks.
How does onboarding work?

We start by understanding how your team works and then configure the platform to fit your needs. We train your team hands-on and stay close once you are live. Step-by-step tutorials inside the platform, a full knowledge base and access to our roadmap support you as new features land.