Security assessment tooling, documented properly.
Three tools for project risk, assessment framing, and control selection — built the way a GCC GRC team actually works: structured, scored, ready to export.
Three exhibits. One assessment discipline.
Each tool stands alone. Use whichever one a project needs — or run them in sequence, with a human handoff between each: PIRA, then Compass, then Outset as the endpoint.
Project Impact Risk Assessment
A guided wizard that walks a project through a structured risk questionnaire and scores its potential impact before it's greenlit.
Loading…
Each answer moves the score live — this is how a full PIRA assessment scores.
Architecture-Based Question Framing
Upload a brief — and optionally an architecture diagram — and Compass frames layered clarification questions, analyses your responses for gaps, and produces a structured summary ready to hand off to Control Selection.
- 6-stage guided workflow
- Layered questions + gap analysis
- Structured summary for handoff
Control Selection
Choose applicable controls from a 116-control library across 13 domains, including AI/ML sub-profiles, and build a scoped control register — the ultimate goal of the workflow.
- 116 controls, 13 domains
- AI/ML sub-profiles
- Scoped control register
Three clauses, followed every time.
The same discipline runs underneath all three tools.
Structured
Every assessment follows a fixed set of questions or controls, so two people running the same review land on comparable results.
Scored
Responses roll up into a score, so findings can be tracked over time instead of re-argued each cycle.
Exportable
Results export cleanly into the report format your audit or governance process already expects.
Built by a practitioner running risk and governance assessments across SAP and enterprise systems day to day — the tools are shaped by the audits they're used in, not the other way around.— QUITELAYER, DOHA
Pick a starting point.
Every assessment starts somewhere. Launch a tool above, or reach out if you're not sure which one fits.
Get in touch →