RiskSight/Product tree/Audited 7 September 2026

The RiskSight Tree

The trunk

Three registers that every root feeds back into.

Risk

Risk registers

A register for the whole organisation, a division or a single site — each with its own appetite, and a workshop and approval step before it goes live.

Control

Control library

One library for the whole organisation. Every control classified by what it does, tested on a schedule, rated for how well it works, and given a traffic light.

Action

Action register

One place for every action, wherever it came from — an investigation, a failed control, an audit gap, a hazard report, a review decision — and someone has to verify it before it closes.

The root system

Six roots, twenty branches, 177 features. Hover a feature for what it does.

RiskSight Risk · Control · Action

Risk & control

Risk registers, the control library, risk workshops and critical control management.

Risk registers

  • Risk matrix
  • Inherent & residual
  • Appetite & tolerance
  • Appetite alerts
  • Register review
  • Publish lock
  • Register import
  • Risk categories
  • Coverage map
  • Version history
  • Quick add risk

Controls

  • Control library
  • Control classification
  • Control testing
  • Control health
  • Control alerts
  • Control types
  • Control export

Risk workshops

  • WRAC
  • HAZOP
  • SWIFT
  • FMEA
  • HAZID
  • Guide words
  • Scenario to register
  • Control override
  • Branded records
  • HAZID record template

Critical controls

  • MUE register
  • Broadbrush review
  • Performance standards
  • Trigger thresholds
  • Control verification
  • Verification scheduling
  • CCM dashboard
  • Worker briefings
  • Executive MUE review
  • Bowties
  • Barrier effectiveness
  • Degradation factors

Incidents & assurance

Incident reporting, investigation and audit.

Reporting

  • Incident reporting
  • Actual & potential
  • Workflow hub
  • Duplicate detection
  • Confidential incidents
  • Injured person records
  • Custom fields
  • Daily summary
  • Hazard reports
  • QR reporting

Investigation

  • Method eligibility
  • Three methods
  • PEEPO
  • ICAM factors
  • Timeline
  • MUE check
  • Qualified approval
  • Evidence analysis
  • Lesson extraction

Audit & assurance

  • Audit templates
  • Level 3 audit
  • Custom audit forms
  • Effectiveness ratings
  • Gaps to actions
  • Item evidence
  • Effectiveness trend

Your people

Training, injury management and workplace medicals, with privacy controls across all three.

Training

  • Training catalogue
  • Positions
  • Needs matrix
  • Compliance matrix
  • Automatic lapsing
  • Self-service evidence
  • Evidence verification
  • Team clearance
  • Non-user people

Online learning

  • Course library
  • SCORM courses
  • Course preview
  • Free assignment
  • Attempt release
  • Revision control
  • Course releases
  • My Training
  • Assessment integrity

Injury & return to work

  • Injury cases
  • Capacity certificates
  • Return to work
  • Restrictions
  • Consent register
  • Disclosure register
  • Provider access
  • Closure & reopening
  • Statistics retention

Workplace medicals

  • Medical requirements
  • Hazard exposure
  • Exemptions
  • Fitness outcomes
  • Clinical confidentiality
  • Credential mirror
  • Referrals
  • Medical candidates
  • Statutory duties

Privacy & records

  • Site-scoped grants
  • Admin exclusion
  • Access logging
  • Blind refusal
  • External access log
  • Retention holds
  • Fail-safe retention
  • Purge reporting
  • Register separation

Governance & reporting

Communications, governance reviews and dashboards.

Communication

  • Communications register
  • Safety alerts
  • Lessons learned
  • Confidential lessons
  • Approvers & recipients
  • Meetings register
  • Suggested attendees
  • Recurring meetings

Governance

  • Management reviews
  • Compiled inputs
  • Decisions & directives
  • Review lock
  • Governance reports
  • Drafted commentary
  • Report lock
  • Standing agenda
  • Save in progress

Dashboards & insight

  • Custom dashboards
  • Risk heat map
  • HiPo tracking
  • Action performance
  • Maturity assessment
  • Health reporting
  • Ask your data
  • Semantic search
  • AI drafting
  • Human review gate
  • AI controls

Platform & setup

Organisation setup, configuration and admin.

Your organisation

  • Divisions & sites
  • Cross-division sites
  • Custom roles
  • Site-scoped roles
  • People lists
  • Automatic seats
  • Plan quotas
  • User import
  • People list search

Setting it up

  • Form builder
  • Export layouts
  • Configurable lists
  • Branding
  • Languages
  • Neutral wording
  • Feature flags
  • API keys
  • Onboarding
  • Module switching

Running it

  • Self-serve plans
  • Operator audit log
  • Notification settings
  • Audit trail
  • Help centre
  • Video walkthroughs
  • Help search

What's next

Scoped and specified.

Out in the field

  • Mobile app
  • Full mobile form
  • Email sign-in
  • Permits to work
  • Electronic JSEAs
  • Crew sign-on
  • Offline capture

New modules

  • Contractor management
  • Management of change
  • Legal register
  • Statutory records
  • Regulatory notices
Six roots · twenty branches · 177 features
0 done 0 in progress 0 planned 0 exploring RiskSight — audited 7 September 2026

Audited against the running product. Updated whenever something changes state. Planned means scoped and specified — we don't publish dates.