Ask the AI chat what could hurt your checkout and what it touches. Entelim shows each risk recorded against it with its level, its likelihood and impact score, its recorded owner, its mitigation plan and a count of the connections its blast radius reaches. The Risk Register lists every risk with the same fields, so you can see which ones have no owner.
Which risks sit on our revenue-critical path, and who owns the mitigation?
For scale-up CTOs and VPs of Engineering.
The question
A risk gets logged in a spreadsheet against one component. The spreadsheet says how bad it is and who should deal with it. It does not say what else the risk touches, so nobody can tell whether it sits on the path your revenue depends on. When an investor or auditor asks which risks matter most, you piece the answer together by hand.
What Entelim answers
Name the system or risk in your question, for example "what could hurt our checkout, and what does it touch?" The answer shows one card per risk recorded against that element:
- the risk title and its level (low, medium, high or critical)
- the line "Likelihood 4 x Impact 3 = 12", with your own figures
- the owner, or "No owner recorded" when nobody is named
- the mitigation plan, when one has been written
- a count such as "6 connections reached", the size of the risk's blast radius, found by following the same connections the "what breaks if it fails" question follows
If nothing is recorded against the element, the answer says "No risks recorded against this element." If the lookup fails, it says so rather than showing an empty list.
The Risk Register (under Compliance) holds the risks themselves. It shows four tiles, Total, Open, Critical and Mitigated, then a table with Title, Owner, Likelihood, Impact, Score, Level and Status. You can search by title, filter by status (Open, Mitigated, Accepted or Closed), and use the row actions View, Edit, Map to, Mark mitigated, Reopen, Close and Delete. Add Risk takes a title, description, likelihood and impact from 1 to 5, an owner and a mitigation plan. Critical counts open risks only, so a closed risk does not inflate the figure.
Who asks it
A CTO or VP of Engineering preparing a board pack, a security questionnaire or a due-diligence response, who needs to say which risks are real, how far each one reaches and who is holding it.
How to get your answer
- Connect GitHub or import a file so your systems are in the model, then open the Risk Register and choose Add Risk for each risk you track. Give it a likelihood, an impact, an owner and a mitigation plan.
- Check the register's table for rows where the Owner column is empty. Those are the risks nobody holds.
- Make sure the systems the risk affects are connected to it in your model, so there is something for the blast radius to follow.
- Open the AI chat and ask what could hurt the system or risk, and what it touches.
- Read the card: level, score, owner, mitigation plan and the number of connections reached.
Doing this without Entelim
You keep a risk log in a spreadsheet and a separate set of diagrams, then trace connections by hand for each risk. It works for a handful of risks. It breaks when the diagrams drift from reality, and nothing flags a risk that has lost its owner.
Limits
- The blast radius is a count of connections reached. The card does not list them, and the page does not name the revenue streams they serve.
- Entelim has no field that marks a system or a risk as revenue-critical. You get how far a risk reaches, and you judge which of those reaches matter to revenue.
- The chat finds risks recorded against the element you name. A risk that you only linked to an application, solution or programme with Map to on the register is shown on the register, but the chat does not read those links.
- The owner is the single owner recorded on the risk. There is no separate field for the person who owns the mitigation.
- The score is likelihood times impact from the figures you entered. Entelim does not estimate them.
Frequently asked questions
Does Entelim work out how likely a risk is?
No. You enter the likelihood and impact, each from 1 to 5, and Entelim multiplies them and shows the level.
What if a risk has no owner?
The chat card says "No owner recorded" and the register shows the Owner cell empty. Edit the risk and name one.
Can I see which systems a risk reaches?
The chat shows how many connections the risk reaches. To see the systems themselves, ask the chat what breaks if the element in question fails, or open it in the Composer.
Related questions and modules
- Risk Register Every recorded risk, traced over derived connections to show its real blast radius — not just the one component it was logged against.
- Digital Twin A digital twin of an organisation is one model of what you run, who owns it and what it costs, that you can question in the AI chat and see on the twin map. Start free.
- What breaks if this service fails, and who gets called? For scale-up CTOs and VPs of Engineering, 50-500 people.
- Which risks and control gaps touch this goal, and who owns the mitigation? For enterprise architecture teams answering to a regulator or an internal audit.
Import your model and get a free, cited answer to what breaks if a system fails, in minutes.