Practitioner Workbench

COMPLY-RISK for structured risk assessments

Achieve compliance. Demonstrate it. Sustain it. A practitioner Workbench for connecting assessment context, assets, vulnerabilities, threats, controls, evidence, and treatment decisions into one reviewable risk picture.

Start with the engagement pressure

A Workbench supporting a practical client outcome.

Best for

Organizations that need an ISO-aligned risk assessment, a clearer treatment roadmap, or risk evidence that can support readiness and governance decisions.

Typical trigger

A customer, auditor, leadership team, or framework obligation requires the organization to explain its risk decisions and show what happens next.

Practitioner use

COMPLY practitioners structure the assessment, confirm the in-scope assets, evaluate realistic risk scenarios, connect controls and evidence, and prepare decisions for review or approval.

Representative practitioner workflow

How COMPLY practitioners use it during an engagement.

The Workbench supports the practitioner’s delivery workflow. Depending on the engagement need, the client-facing outcome may include a report, export, representative screenshot, selected view, or controlled access.

Define the assessment context

Select the assessment, confirm the scope and assets, and capture the security and privacy needs that shape the evaluation.

Identify risks and scenarios

Map vulnerabilities, threats, and realistic risk scenarios to each selected asset and business context.

Evaluate controls and residual risk

Link controls, review effectiveness, score residual exposure, and decide how risk should be treated.

Prepare approval evidence

Capture supporting evidence, approvals, the risk register, treatment decisions, and Statement of Applicability support.

Agreed client-facing outcome

What the engagement can leave behind.

Risk register and findings summary

Risk treatment plan with accountable owners

Control, evidence, and applicability traceability

Selected reports or controlled views agreed for the engagement

Next step

Clarify whether this Workbench belongs in the engagement.

COMPLY supports readiness, governance, evidence, risk management, and internal assessment. It does not issue certifications, replace an independent auditor or certification body, act as a QSA where one is required, or provide legal advice.

Book a Compliance Clarity Conversation See all Workbench screenshots