Strategic Risk Management

Strategic risk management software.
Built into your delivery hierarchy, not bolted on beside it.

Most risk management tools are disconnected from strategy. StrategyWorks connects every risk, issue, and decision to the objective or initiative it threatens. When something escalates, it surfaces in context, not buried in a RAG spreadsheet sent the night before a board meeting.

Our customers include

Bank of England Christie's John Lewis BMA City & Guilds Blue Cross SBCI Corserv Aberystwyth University Jaguar Land Rover Bank of England Christie's John Lewis BMA City & Guilds Blue Cross SBCI Corserv Aberystwyth University Jaguar Land Rover
The problem

The risk register is the least-read document in most organisations.

When risk management is a separate process, it becomes a compliance exercise. Nobody reads a 200-line spreadsheet. Nobody escalates in time. And when something goes wrong, leadership is always surprised.

Risks are logged but not acted on

A standalone risk register is filled in quarterly, filed away, and ignored until the next update cycle. The discipline of logging risk has no connection to the discipline of managing strategy.

Escalation depends on someone remembering to escalate

When a risk crystallises, the escalation path is an email chain. By the time leadership hears about it, the delivery team has been managing a crisis for three weeks in silence.

Nobody knows which risks threaten which objectives

Risk registers track risks. They do not tell you that three of your highest-scoring risks all threaten the same strategic priority, or that one programme is carrying 80% of your portfolio risk.

What StrategyWorks tracks

Risks, issues, and decisions. Connected to what they affect.

Three types of strategic intelligence, each logged against the objective, programme, or project it relates to.

Risk

Strategic risks

Something that could happen and would threaten a strategic outcome if it did. Logged against the objective or initiative at risk. Tracked by likelihood, impact, and owner.

Issue

Active issues

Something that has already happened and is currently affecting delivery. Issues are flagged to the correct level of the hierarchy, so leadership sees them without waiting for a report.

Decision

Key decisions

Choices made (or that need to be made) that have strategic implications. Logged in context so they are traceable, not buried in meeting notes or email threads six months later.

Strategic risk management in StrategyWorks
In-context risk

Risk logged where it belongs, visible where it matters

When a delivery lead logs a risk against a project, it is immediately visible at programme level, portfolio level, and in the strategic view. Leadership does not need to read a risk register to know where the pressure is. It is already in the dashboard they are looking at.

  • Risks visible at every level of the hierarchy above where they are logged
  • Risk concentration visible across the portfolio
  • No manual escalation required for visibility
Strategy and risk connected in StrategyWorks
Strategic context

See which risks threaten which strategic objectives

In most organisations, the link between risk and strategy is theoretical. In StrategyWorks it is structural. Every risk is tagged to the objective it threatens, so you can immediately see which strategic priorities carry the most risk, and make resourcing decisions accordingly.

  • Strategic priorities show their risk exposure at a glance
  • OKRs and KPIs connected to the risks that could derail them
  • Portfolio risk concentration visible to leadership without drilling down
Risk dashboard in StrategyWorks
Risk dashboard

A risk view leadership will actually read

The risk dashboard shows where risk is concentrated across your strategy and portfolio. Not a table of 200 rows: a view that shows the five risks that matter most to your strategic objectives, who owns them, and what the current mitigation status is.

  • Risk dashboard filtered by strategic priority, programme, or severity
  • Risk owner accountability built in
  • Status and mitigation actions tracked in context
Included in OKR free

Strategic risk management is included in the free plan.

You do not need to upgrade to use risk management in StrategyWorks. Strategic risks, issues, and decisions are part of the free OKR plan, connected to your strategy and OKRs from day one. The Platform plan extends this to portfolio, programme, and project level.

Platform: £35 / initiative / month
  • Everything in OKR
  • Risks at portfolio, programme, and project level
  • Portfolio-wide risk concentration view
  • Escalation paths through delivery hierarchy
  • Issues and decisions at all delivery levels
Get started free
Pricing

Straightforward pricing. No per-seat fees.

30-day free trial
Platform
£35 / initiative / month
Everything in OKR, plus portfolio and delivery management with risk at every level.
  • Unlimited users
  • Everything in OKR
  • Portfolio, programme, project management
  • Risks and issues at all delivery levels
  • Portfolio risk concentration view
  • Execution, financials, milestones
  • Power BI included free with templates
  • Bespoke setup and design
Enterprise
Bespoke
Everything in Platform, with bespoke deployment and the Shapecast strategy design service included.
  • Unlimited users
  • Everything in Platform
  • Bespoke SSO (SAML / OIDC)
  • Advanced permissions and org hierarchy
  • Dedicated customer success and SLA
  • Strategy design service included
  • Custom integrations and data migration
  • Bespoke setup and design

An "initiative" is any node in the delivery hierarchy connected to strategy: a strategic initiative, portfolio, programme or project. Sub-items are not counted.

FAQ

Frequently asked questions

Strategic risk management is the process of identifying, assessing, and responding to risks that could prevent an organisation from achieving its strategic objectives. Unlike operational risk management, it focuses on the risks that threaten the strategy itself: market shifts, competitive moves, capability gaps, and execution failures.
In StrategyWorks, risks are not stored in a separate register. They are logged directly against the strategic objective, OKR, programme, or project they threaten. This means risk is always visible in context. Leadership can see where risk is concentrated across the portfolio, and escalation paths are structural rather than relying on manual reporting.
Yes. Strategic risks, issues, and decisions are included in the free OKR plan. You can log and track risks against your strategic objectives and OKRs without upgrading. The Platform plan adds risk tracking at portfolio, programme, and project level.
A risk is something that could happen and would threaten a strategic outcome if it did. An issue is something that has already happened and is currently affecting delivery. A decision is a choice made (or that needs to be made) that has strategic implications. StrategyWorks tracks all three in context, connected to the part of the strategy or portfolio they relate to.
StrategyWorks covers strategic and portfolio-level risk management, connected to your strategy hierarchy. It is designed for strategy and delivery risk, not for operational, compliance, or financial risk management at scale. Organisations with dedicated GRC or ERM systems can use StrategyWorks for the strategic layer alongside their existing tooling.

See strategic risk management that actually connects to strategy

Book a 30-minute demo and see how StrategyWorks integrates risk into your strategy hierarchy.

Book a demo