The .legal Risk Module is a centralised tool for identifying, assessing, and managing risks across your organisation — covering processing activities, IT/OT assets, and compliance frameworks such as GDPR and NIS2.
The .legal Risk Module supports:
- Risk assessments on processing activities (typically related to personal data)
- Risk assessments on assets (typically IT/OT systems or infrastructure)
You can also assign each risk to a compliance domain, such as GDPR, NIS2 or internal frameworks.
What is the .legal Risk Module used for?
- Identify and assess risks across the organisation
- Prioritise which threats to act on
- Document likelihood, impact and mitigating actions
- Create tasks directly from risks
- Monitor changes over time with version history
Whether you’re preparing for an audit, tracking threats from vendors, or ensuring your systems meet your own InfoSec policies — the dot.legal Risk Module is your central hub for managing it all.
How does the .legal Risk Module handle GDPR vs. NIS2 compliance?
Each risk template lets you define whether it applies to GDPR, NIS2, or another compliance framework. This means you can tailor your risk assessments to the specific regulatory obligations most relevant to your organisation, and report on them separately.