An engine that measures risk by the organisation's own rules.
It turns question sets into risks, scores likelihood and impact, opens tickets for the owners and runs the acceptance flow. All inside GLPI.
Slide likelihood and impact; the score, level and matrix cell are calculated instantly.
Main screenIt turns question sets into risks, scores likelihood and impact, opens tickets for the owners and runs the acceptance flow. All inside GLPI.
The problem
Regulations such as the Turkish capital-markets communiqué (SPK BSY), ISO 27001 and the data-protection law (KVKK) require IT risk to be assessed regularly. Most organisations do it in Excel: questions, scores and actions stay scattered, and finding evidence during an audit becomes hard.
What I built
Pusula moves the assessment into GLPI: ready-made regulation sets (SPK BSY VII-128.10, ISO 27001, KVKK, BDDK, EPDK) come with their questions; questions are distributed to their owners, answers become risk records, likelihood and impact are scored on the scale the organisation chooses, and actions are opened as tickets. Evidence is stored as GLPI documents, and a live compliance view forms against the regulation clauses.
Technical notes
- Question owners are copied when an assessment starts; each answers only their own questions
- Ticket follow-ups flow into the risk record, and risk notes into the ticket
- Regulation updates carry old answers over through a mapping table
Highlights
- Ready-made regulation sets with hundreds of questions; organisations can write their own
- Configurable scoring: 4+2 or 5+3 scale, 5×5 heat map
- Risk → action → ticket chain, with acceptance and approver flow
- Per-risk view rights, multi-unit assessment averages
- Risk import from Excel, an Analiz dashboard, an AI assistant