← Risk Posture Tools

⚠️ Risk Assessment Tool

Guided Mode

These tools are designed for desktop use and work best on a larger screen.

Assessment Scope

System / Process Name *

Organization / Owner

Assessor

Assessment Date

Scope Description — What is included / excluded

Asset & Information Characteristics

Information Type

System Categorization FIPS 199

Confidentiality Impact

Integrity Impact

Availability Impact

Threat Sources NIST SP 800-30 Table D-2

Adversarial — IndividualHackers, insiders, disgruntled employees Adversarial — GroupCriminal orgs, hacktivists, nation-state Nation-State / APTSophisticated persistent threat actors Accidental — User ErrorMistakes by authorized users Accidental — IT ErrorMisconfiguration, admin mistakes Structural — HardwareComponent failure, aging infrastructure Structural — SoftwareBugs, vulnerabilities, end-of-life EnvironmentalNatural disasters, power, physical hazards Supply ChainThird-party vendor / software risk Insider ThreatMalicious or negligent insiders

Known Vulnerabilities & Weaknesses

Add Vulnerability — press Enter to add

Vulnerability / WeaknessSeverityExposure

Overall Vulnerability Severity

—

Known Exposure / Attack Surface

Additional Notes — context, CVE IDs, remediation status, etc.

Existing & Compensating Controls

Add Control — press Enter to add

ControlImplementation LevelEffectiveness

Overall Implementation Level

—

Overall Effectiveness

—

Additional Notes — gaps, planned remediation, compensating rationale, etc.

Assumptions & Constraints

Key Assumptions — press Enter to add

Information Confidence Level — how much is known about this system

Constraints / Limitations

Risk Context

Industry / Sector

Regulatory Requirements

Assessor Notes — additional context or qualifications

🔒

Fill in the assessment inputs and click Generate Risk Assessment to produce a NIST-aligned risk statement and score.

Save as JSON

.json

Reset Assessment?

All saved progress will be permanently cleared. Save a JSON backup first, or reset without saving.