Risk register
Unified list of every risk in the project, across all methods, brought back to a common structure.
What the register normalises
Each method rates risk differently (V × G in EBIOS, IPR in FMEA, residual frequency in LOPA, SL in IEC 62443). The register maps these ratings to a common risk level to allow comparison and sorting.
| Column | Content |
|---|---|
| Source | Originating method, with its colour code |
| Label | Risk title in its method |
| Level | Normalised level (Critical / High / Moderate / Low) |
| Treatment | Decision made |
| Owner, Due date | Oversight |
Filters
By active source (set on the module home page), by level, and by treatment status.
Normalisation has its limits
Comparing an FMEA IPR and an EBIOS severity remains an approximation: the scales do not carry the same meaning. The register is meant to spot and prioritise, not to prove that an FMEA risk is "more severe" than a cyber risk. For any binding decision, go back to the originating method — the link takes you there directly.
Traceability
Each row keeps its link to the source object: opening the risk takes you back to the page of the method that produced it, in its rating context.