Yes. PRM is a web-based platform, meaning you can access the application on any browser and operating system using your desktop, laptop, or mobile device. Your data is continuously backed up and fully secured using AES-256 encryption and TLS 1.2+, ensuring it cannot be intercepted or modified, either at rest or during transit. Our BASIC and PRO plans are cloud-hosted, while our ENTERPRISE plan provides you with additional autonomy with the platform installed on your local server.
The Organisation Owner is the registered PRM subscriber who creates and manages all the organisations in which their projects and risks reside. This team member is an active team member with full access to all data and parameters within the PRM platform and can create multiple organisations with independent projects and team members for each organisation.
No. Each PRM subscription can only have one Organisation Owner. Organisation Owners can create as many organisations within their PRM account as they like and can invite team members to join their organisations based on their subscription plan. Under our BASIC plan, as the primary active team member, the Organisation Owner can invite one additional active team member and unlimited guest team members at no additional cost.
Active team members are PRM users who are actively involved in the management of projects and risks on the platform. These team members can be assigned user roles at two levels: Project Owner or Risk Owner. Project Owners have access rights to all project data within the organisation they have been assigned to. These team members can add, edit, or delete projects, risks, or team members within their organisation. Risk Owners only have access rights to the risks that have been assigned to them. These team members can add and edit mitigation plans and response actions to these risks only.
Guest team members are PRM users with view-only access rights. These team members cannot add, edit, or delete any data, but they can view all projects and risks within the organisation they have been assigned to.
Yes, but not by default. The default risk matrix is configured to manage threat, or negative-impact, risks. PRM’s risk matrix is, however, completely customisable. This allows you to configure your risk matrix to manage opportunity risks, rather that threat risks, if you want. (Handy Tip: If you want to manage both threat and opportunity risks, you can do this by configuring your risk matrices under separate organisations – One for managing threat risks and the other for managing opportunity risks).
Four risk matrix templates are provided:
Each template is fully customisable, so you can configure your matrix to a size that suits your organisation best, from a minimum size of 3 x 3 to a maximum size of 7 x 7. You can even have different numbers of rows and columns if you want, such as 3 x 5, 4 x 6, 7 x 4 etc.
Yes. In addition to configuring risk matrix size, you can also customise every other element of the matrix, including:
The application uses the risk severity level and status of response actions to determine whether a risk is either; Open, On-Going, or Accepted. If the status of all risk response actions is “Complete” and the mitigated severity level falls within the defined acceptance threshold (configured during matrix setup), the system will automatically assign the risk status as “Accepted”.
Yes. There will inevitably be instances where organisations will need to accept risks even though they have not, or cannot, adequately mitigate them. The application therefore provides a function for authorised team members to manually accept risks where required.
Risk manageability is derived from the expected risk occurrence date and the number of response actions assigned to mitigate the risk. The more distant the expected risk occurrence date, and the more response actions there are, the more manageable the risk is. This is an important metric to apply when it comes to prioritising risks. Risks that are likely to occur imminently and have no response actions have a low manageability rank, whereas risks that are not likely to occur until sometime in the distant future and multiple response actions have a high manageability rank.
Identify, analyse, and control all risks on your projects professionally, with ease and simplicity.
