Rukn ERM: Risk Register

Hassan Moubarak

About this app

Enterprise risk management, without the enterprise price tag.

The enterprise GRC platforms most risk teams get quoted start around fifty thousand dollars a year and take months to roll out. Rukn ERM does the same job from $99 a month, and you can be live this afternoon.

WHO IT'S FOR
• Risk, audit and compliance leaders at organisations carrying a board-level risk obligation without an enterprise GRC budget.
• GRC consultants and boutique audit firms running risk assessments across multiple clients.
• Scale-ups building a documented risk register as evidence for ISO 31000, ISO 27001 or SOC 2.

WHAT YOU CAN DO
• Risk register — capture risks and score them on a 5×5 inherent and residual matrix, with control effectiveness built in.
• Heat map & dashboard — see your risk posture at a glance.
• Key risk indicators (KRIs) — set amber and red thresholds and a measurement cycle, log readings, and get alerted when an indicator turns red or a reading falls overdue. Link a KRI to the control it monitors and a breach names that control and how it last tested.
• Risk appetite — define appetite and tolerance per category and catch breaches automatically.
• Controls library — map controls to risks and let residual scores follow. Record each test with its date, tester and rating, so a control carries a history rather than a single number.
• Incidents & actions — log events, assign corrective actions, and track them to closure.
• Governance & policies — manage committees and policies with review cycles.
• Compliance mapping — track frameworks and requirements and evidence your posture.
• Audits & findings — plan audits, raise findings, and drive remediation.
• Monte Carlo quantification — estimate aggregate annual loss and Value-at-Risk.
• AI risk assistant — ask questions about your own risk data in plain language.
• Evidence — attach the sample, screenshot or signed approval to a risk, incident, policy, audit finding or control test, so a rating is something an auditor can check.
• Start from a spreadsheet — import your units, departments, people, appetite, register, indicators and controls from one template.
• Take your data with you — administrators can download a workbook of every register plus a zip of every attached file, on any plan.
• Executive reports — export board-ready Excel, PowerPoint and PDF.

ENTERPRISE-READY
• Biometric app lock (fingerprint or face).
• Two-factor authentication by email one-time code.
• Role-based access for admins, risk managers, risk owners and staff.
• Each organisation's data is isolated.

BUILT FOR THE REGION
• Full Arabic and English with right-to-left layout.
• Industry risk taxonomies for financial services, healthcare, manufacturing, technology and retail.
• Recently viewed records stay readable when the connection drops, and refresh automatically once you are back online.

Start a 30-day free trial. Questions? [e-mail]

Rukn ERM is an independent product aligned to the COSO ERM 2017 framework and is not affiliated with, sponsored by, or endorsed by COSO.

What’s new

Dashboard redesign with a tappable heat map. Full data export: one workbook of every register plus a zip of your attachments. Control test history and evidence. Fixes to the Actions screen.