A beginner-friendly AI Governance & Risk Toolkit — risk register, governance templates, and audit-ready workflows for early-stage AI teams.

Community-maintained risk register for the use of generative AI in research software engineering.

Risk management web app using a risk register tool. Provides a dashboard with the ability to add, remove, modify risks as well as prioritize. Provides stats such as score, average probability, average impact, average risk level, total risks, high-level risks and a doughnut chart for visualization.

AI Act compliance bundle — DSAR / bias monitoring / risk register / human-review tracker / consent / disclosure middleware

Professional Governance, Risk & Compliance Portfolio

An open-source GRC (Governance, Risk, and Compliance) platform designed to help teams manage security risks, compliance workflows, audits, and information assets. Built with Next.js, Tailwind CSS, and MongoDB — with a focus on usability, flexibility, and ISO 27001 alignment. Contributions welcome!

CSV and Excel risk register templates with scoring fields, examples, and guidance for executive reporting.

Risk Review Regulator designed a set of agentic AI personas to automatically review risk registers, analyse data quality and exposure, and drive action through targeted, human‑centred email nudges. The solution demonstrates a closed‑loop risk‑management cycle spanning project, portfolio, and enterprise views.

Synthetic LLM SecOps and AI security governance lab with prompt-injection tests, data leakage scenarios, AI risk register, ISO 27001/CISM-style control mapping, evidence checklist and dashboard screenshots.

Agentic operating system starter for thesis, deal flow, diligence, memos, risk registers, portfolio support, and investor communications.

AI agent risk register template for Codex, Claude Code, Cursor, risk inventory, mitigation, data boundaries, and revenue-proof workflows.

An anonymised SaaS security assessment based on a supervised internship project, demonstrating threat modelling, auth/API review, risk registers and executive‑style reporting for a modern cloud platform.

A complete GRC IT Risk Register for a fictional University IT Department — 13 risks, heat map, and executive summary. Aligned to ISO 27001 and NIST CSF.

Single-file, offline-capable tool for recording architecture decisions (ADRs) and tracking a risk register. No server, no install, data stays local. Supersede chains, risk heat-map, stale-review alerts, and one-click audit/ATO export.

ديوان — The cybersecurity program office every company should have, in one file: risk register with live 5×5 heatmap, asset inventory, NIST CSF 2.0 maturity assessment, incident log, vendor register, POA&M, policy generator & executive reporting. Client-side, zero backend.

Automated GRC Risk Pipeline with dynamic scoring

Cybersecurity risk register built using GRC methodology — risk scoring, control gap analysis, and executive dashboard aligned to NIST CSF

Risky presented a concept prototype focused on applying agentic AI to proactively interrogate risk registers and surface actionable insights for regulators and delivery teams, emphasising clarity of narrative and decision support.

Translate OSCAL control findings into risk scenarios and risk register outputs.

A realistic information security risk register modeled on NIST Cybersecurity Framework (CSF) 2.0 principles. It covers 20 identified risks across a small professional services organization, documenting assets, threats, vulnerabilities, likelihood, impact, risk scores, and mitigations in a consistent, auditable format.