⚠️ Keep a Risk Register People Actually Use

Our risk register is a spreadsheet nobody has opened in a year. Build me a risk register app. Keep one record per risk with a plain description of what could happen and its consequence, the category, the owner, an inherent score from impact and likelihood before controls, the controls in place each with their own owner and how often they are meant to operate, and a residual score after controls. Set the review frequency from the residual score so higher risks are reviewed more often. Record each review with the date, who did it and whether anything changed. Show me the register sorted by residual score, and separately the top risks only, for reporting upward. Add an AI agent that reviews the register and tells me where a control is recorded but shows no evidence of actually operating, where the residual score looks optimistic given recent incidents, and which risks have not been reviewed within their cycle. Automate two things: review reminders to risk owners, and a scheduled quarterly report of the top risks and anything whose score has moved. Two logins: a risk owner who maintains their own, and a compliance owner who sees everything.