02 · Risk

Risk assessment, actually done.

Model, score, and treat risk with a register your team actually uses. Quantitative or qualitative — it is your methodology, we just make it usable.

Methodologies

Bring your own framework. Tellus supports quantitative (FAIR, Monte Carlo) or qualitative (5×5, heat maps) — or mix them by domain.

Live scoring

Risk scores update as control effectiveness changes. A failing control raises residual risk automatically; no quarterly spreadsheet dance.

Treatment

Assign owners, deadlines, and evidence. Tellus tracks treatment to closure and re-opens issues when signals regress.

142

Active risks tracked

3.4→2.1

Median residual reduction

87%

Treatments closed on time

∞

Risk domains supported

In the product

Built to be used — not admired.

ID	Risk	Inherent	Owner	Treatment	Residual
R-141	Vendor concentration · AWS	High	VP Infra	Accept · Q3 review	Residual 4.1
R-142	SSO provider SPOF	Med	CISO	Mitigate · MFA fallback	Residual 2.2
R-156	Data residency · EU	High	DPO	Transfer · new region	In progress
R-160	Insider threat · priv access	Med	Sec Eng	Mitigate · JIT access	Residual 1.8
R-163	Open-source supply chain	Low	Eng	Accept	Residual 1.2

Start free. Bring your first framework online in under an hour.