ExportableProof — Routines today. Proof tomorrow.

Risk

ISMS Risks and Opportunities Register

Define the required structure for tracking ISMS risks and opportunities, including source, assessment, owner, decision, treatment or exploitation action, evidence and review status.

Back to demo

Demo. This is an Arcfield simulation, not a customer record. Provided as-is, without warranty. It does not replace professional legal, audit, or certification advice.

OSCAL source · ROAR

{
  "artifactId": "ROAR",
  "iso": [
    "6.1",
    "7.5"
  ],
  "catalog": [
    {
      "iso": "7.5",
      "oscalId": "iso27001-7.5",
      "title": "Documented information",
      "className": "iso27001-clause",
      "group": "Support"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-7.5",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    }
  ],
  "components": [],
  "sspImplementedRequirements": []
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…