Confidential Risk Consulting: can your records prove what you did?
Confidential Risk Consulting (New Zealand) reviews whether an organisation's safety and security documentation would stand up after an incident, and what to fix before one.
Visit Confidential Risk Consulting → Talk to me about a tool like this
The problem
After an incident, investigators, insurers and courts ask an organisation to prove that a control was reasonable and was actually carried out. A control that existed but was never written down, or was written down generically, is very hard to defend.
What I built
- Documentation audits of the procedures and records behind safety and security controls, with a score and a prioritised list of fixes.
- Free tools on the CRC website, including a ten-question self-assessment and a free handbook on reducing liability through documentation.
How it works
Audits work within an ISO 31000 risk-management process and apply the Lr Model, which adds a Documentation Coefficient to a risk assessment. It measures the liability that remains when a control exists but can't be proven on paper, so the gap can be closed before an incident rather than argued over after it.
Questions
What does Confidential Risk Consulting do?
It audits the documentation behind safety and security controls and shows what to fix so the controls can be defended after an incident.
Who runs Confidential Risk Consulting?
Richard G. Prouse, Principal Analyst, based in Auckland, New Zealand.
Need something like this for your organisation? I build checkers, trackers, assessments and reports at a fixed price. Book a free 30-minute call.
More of my work: TenderAxiom · DutyNode · Aidfolio · Research