Cloud risk management tool with layered risks and visual ratings

About the client

A startup in Norway in the fintech and banking domain. Its cloud service connects risk owners with their stakeholders in any country.

Objective

The client wanted one tool with a 360 degree view of the risks of an organisation. Five types were in scope: organisational, operational, financial, locational and bow tie barriers. The tool had to be easy to use and still cover complex cases. It also had to combine industry practice with the client’s patent-pending visualisation concept.

What we built

The product is a risk management system for companies and their risk owners. Users group risks in layers, share them with other companies and limit who sees them. Each risk has a rating. Two developers built the MVP in 11 months on Node, React, Redux and TypeScript.

Risks, layers and access

• Built the layer model. A risk belongs to a layer, and layers form a tree.
• Added sharing of risks and layers between users and between companies.
• Implemented roles and permissions that limit a layer or a risk to given users, roles and companies.
• Kept the data of each user and each company in its own data set.

Ratings, views and interface

• Added the evaluation of risk ratings.
• Built five views of the same data: tables, lists, maps, charts and trees.
• Let users mark layers and risks as favourites.
• Made one interface for end users and one for administrators.
• Prepared the Node server for a high load of operations.

Result

The MVP is complete. It covers five risk types (client data) and shows them in five views (client data). Two developers delivered it in 11 months (client data). The client approved the quality of the MVP and is now evaluating further investment. We build web applications of this kind under our web applications and SaaS service.