Define scope
Capture lifecycle, criticality, exposure, data, hosting, and service context.
Risk assessment and reporting
Make technology risk easier to identify, understand and act on
Aegis101 uses guided scope and contextual routing to identify material weaknesses quickly, keep unresolved information visible, and turn the assessed position into a prioritised action plan.
Outputs inform accountable decisions. Answers and supporting evidence remain subject to owner review and independent validation where required.
Guided assessment
Autosave and resume
Interim reporting
Risk-led action
Comparison and trends
The assessment lifecycle
Context first, then questions that fit
The assessment route responds to the system or service context, reducing irrelevant questioning while preserving the controls needed for credible interpretation.
Route and guide
Ask relevant questions and explain what each one is seeking and why it matters.
Save and resume
Autosave progress, save explicitly, and continue the assessment across working sessions.
Report
Interpret the available answer basis in an interim or completed report.
Resolve and act
Complete exact outstanding items and direct treatment, evidence, or decision follow-up.
Compare and track
Reassess, compare compatible reports, and understand directional change over time.
Decision-ready output
One report journey, from current basis to closure evidence
Each report layer has a purpose. It starts with status and decision context, moves through risk themes, and ends with practical follow-up and assurance boundaries.
Executive view
Headline position, severity distribution, main drivers, priority risks, and the boundary of the decision.
Risk profile
Overall residual risk, distribution, material exceptions, and category-level interpretation.
Remediation roadmap
Risk-led lanes, direct action focus, suggested ownership, and proportionate detail.
Evidence confidence and validation priority
Highlights where review of supporting evidence would most improve confidence in the reported position. Aegis101 does not independently validate evidence.
Framework-specific views
Governed mappings that retain the framework's structure, terminology, and limitations.
Conclusion and next steps
Clear decisions, follow-up, reassessment expectations, and assurance limitations.
Actionable by design
Connect each material weakness to a treatment direction
Roadmap actions preserve the relationship between the answered control, the risk it creates, and the evidence that would support an improved position.
- Direct titles: specific to the selected response and control theme.
- Action focus: what should change, be tested, or be decided.
- Suggested owner: an accountable route, not an invented named owner.
- Closure evidence: the records, tests, decisions, or monitoring needed.
Progressive by design
Make progress without disguising uncertainty
Not every control can be confirmed in one sitting. Aegis101 keeps unavailable information visible while using the confirmed answer basis to support proportionate risk decisions.
Work over time
Autosave, explicit saving, Workspace drafts, and resume routes maintain continuity across assessment sessions.
Generate an interim position
Where the available basis supports reliable interpretation, generate a useful interim report without treating deferred or not-yet-confirmed items as positive answers.
Return to the exact item
Outstanding registers explain what remains and provide a direct route back to the relevant scope or control question.
Risk domains
Security and Operability keep their own meaning
A shared product experience does not require generic risk language. Aegis101 keeps the two non-functional domains distinct.
Control effectiveness and residual security risk
Focuses on threats, exposure, control gaps, material security findings, explicit treatment, and evidence for closure. Visible reporting avoids a separate impact score.
Supportability, resilience, and service consequence
Focuses on operating ownership, monitoring, recoverability, capacity, change, and continuity. Consequence is derived from service context and explained in plain language.
Assessment workspace
Retain the thread from initial assessment to reassessment
The authenticated Workspace retains drafts, reports, creator provenance, reassessment history, compatible comparison, and trend interpretation.
Save and resumeAutosave assessment progress and continue from the retained draft.
Reassess and compareCompare compatible reports after remediation or material change.
Understand the trendTrack changes in recorded risk, material findings, and outstanding work.
See how Aegis101 turns answers into focused action
Explore the fictional Core and framework-specific report tours, then register interest to discuss fit, evaluation, and the outputs that matter to your organisation.