Products
PostureRiskComplianceRegulatoryThird-PartyAI GovernanceOne Vigil Platform
Solutions
For CISOs & Security LeadersFor vCISO PracticesFor Cyber Insurance BrokersFor IT & GRC ConsultanciesFor Regulated Industries
Company
PricingResourcesAboutContact
Request a DemoStart Free Trial
IT Risk Management

Risk

The risk register your board can actually use.

The Risk module gives you a structured, NIST RMF–aligned risk register with SOX ITGC control tracking, board-ready heatmaps, and M&A due diligence workflows — without spreadsheets.

Start Free TrialRequest a Demo
app.vigilgrc.com/risk
RISK REGISTER — NIST RMF ALIGNED
Acme Corporation · FY2026 Q1
RiskLikelihoodImpactLevel
R-001Third-Party API Access
4/55/5Critical
R-002Privileged Access Review
3/54/5High
R-003Patch Cadence
2/54/5Medium
R-004Backup Validation
1/53/5Low
The Problem

Most risk registers are spreadsheets that no one updates. The Risk module replaces them with a live, structured register that maps to NIST RMF, flags risks automatically, and produces board-ready heatmaps without manual effort.

Capabilities

Everything you need to manage Risk at scale.

📋
NIST RMF 7-Step Workflow
Categorize, select, implement, assess, authorize, and monitor controls in a structured, auditable workflow.
⚖️
SOX ITGC Control Tracking
Manage IT General Controls for Sarbanes-Oxley with evidence collection, testing schedules, and deficiency reporting.
🗺️
Board-Ready Risk Heatmap
Generate a 5×5 risk heatmap by likelihood and impact with one click. Board resolution language included.
🤝
M&A Due Diligence Module
Run IT and cyber due diligence on acquisition targets using a standardized findings register.
📡
Risk & Control Monitoring
Review risks against current control status and findings. Changes are tracked in the register, with decisions recorded in the signed ledger.
📚
800+ Pre-Built Controls
Start with our library of pre-built controls mapped to NIST 800-53, ISO 27001, and SOC 2.
How It Works

Up and running in 30 minutes.

Step 1
Import your risk landscape
Upload an existing spreadsheet or start from our pre-built risk library. Takes 20 minutes.
Step 2
Map to NIST RMF steps
The platform organizes your risks into the 7-step RMF lifecycle with automatic status tracking.
Step 3
Generate your board heatmap
One click generates a visual risk heatmap with risk ratings, mitigation status, and residual risk scores.
Framework Coverage
NIST SP 800-53 Rev 5.2NIST RMFISO 27001:2022SOX ITGCCOSOCOBIT 2019
Pricing

Simple, transparent pricing.

Launch
$1,499/month

The Risk module is included in this plan. Posture + Risk + Compliance

✓Posture, Risk & Compliance modules
✓Shared Work layer — Reviews, Actions, Incidents, Reports
✓Shared Library — Findings, Controls, Assets, Evidence
✓Framework packs for CSF 2.0, SOC 2, ISO 27001 & more
✓Board Pack reporting
✓Email support
Request a Demo
Connect
$2,999/month

The Risk module is included in this plan. All six modules

✓All six modules — incl. Regulatory, Third-Party & AI Governance
✓Everything in Launch
✓119-pack regulatory catalog
✓FAIR-based quantitative risk analysis
✓NIST AI RMF & NIST AI 600-1 governance packs
✓Evidence vault & signed decision ledger
✓Priority support
Request a Demo
Growth
$4,499/month

The Risk module is included in this plan. All six modules + priority support & enterprise governance controls

✓Everything in Connect
✓MFA enforcement (AAL2) & role-based access control
✓Signed decision ledger & audit-ready reporting
✓Priority support
✓Dedicated Customer Success Manager
✓Quarterly business review
✓Custom framework mapping available
Request a Demo

See Risk in action.

Book a 30-minute demo. We'll show you exactly how your organization would use Risk — configured to your industry and frameworks.

Book a DemoStart Free Trial