Start from a library, not a blank page
Seed each register from curated risk sets for common project and system types — delivery, suppliers, data, people, and the newer risks that come with AI. Then edit, add, and make it yours.
Defeat risk
The risk register that serves you — your project, your leadership, your compliance.
Every project carries risk. Most registers start as a blank spreadsheet and stall there. Urna starts you from curated risk libraries, scores against recognised frameworks, and suggests the remediation for every risk you log.
FREE · NO CARD · PRIVATE BY DEFAULT
RiskSeverityDecision
- Supplier delay puts go-live date at risk3 suggested controls HIGH TREAT
- Customer data migrated without full mapping4 suggested controls HIGH TREAT
- Staff use unapproved AI tools on project data3 suggested controls MEDIUM TREAT
- Leavers keep access to project systemsControl implemented LOW ACCEPT
AdviceUrna recommends the remediation for every risk you log
96controls in the catalogue the advice draws from
11practice areas in the posture self-assessment
Board-readyreport exported from the dashboard
Risk is rising. AI is adding uncertainty. Navigate it from one hub.
Compliance requirements keep growing, and AI is introducing risks that didn't exist a year ago. A living risk register — with owners, scores, and treatments — is the hub for navigating all of it. Urna gives you that hub, without starting from a blank page.
Score against recognised frameworks
Registers follow a framework-aware structure — ISO 31000 among them — and a posture self-assessment across 11 practice areas shows where the organisation stands and tracks progress.
Get advice on the remediation
Urna analyses each risk you log and recommends the controls to treat it, drawn from a 96-control catalogue — so the register doesn't just record risk, it tells you what to do next, with owners and review dates.
One place for the whole picture
From first inventory to board report
Risk registers per project or systemScored consistently, with treatments, owners, and review dates that don't slip.
Posture self-assessmentEleven practice areas, answered honestly, tracked over time.
Systems & supplier inventoryCatalogue what's in use — including the tools staff adopt informally — with data-sensitivity flags.
Dashboard & board reportScore by area, risk counts, control progress, and actions due — exported when the board asks.
Your working data stays yours
Registers and assessments are private working data — visible only to you, or to colleagues you invite into a shared workspace. Urna is a self-assessment that prepares you for scrutiny; it is not an audit, and it never publishes your answers.
Questions, answered
Is Urna free?
Yes. Urna is free to use — no licence, no card, no trial clock. Create an account and start your register.
Who is it for?
Anyone who owns risk for a project, a system, or an organisation — programme leads, security and compliance teams, operations, and the people rolling out new technology, including AI.
Is my register public?
No. Registers and assessments are private working data, visible only to you or the colleagues you invite into a shared workspace.
Is this a certification or an audit?
No. Urna is a self-assessment that helps you build the register and evidence that audits and frameworks ask for. It does not certify you.
Get started
Put your project risks in order.
Start a register now — seeded, scored, and ready to work from.
Start free