RiskIntelligence& Scoring

Bring operational data and assessments together to derive risks and control requirements across your business and risk domains. Use deterministic calculations to understand how dependencies shape exposure, with scores that respond to changing conditions and remain traceable to the factors and relationships behind them.

WHY IT MATTERS

Go beyond dependency mapping.Understand how connectionsshape risk.

Knowing what connects to what is only the starting point. Iroko Canopy uses those relationships to calculate effective exposure: the risk an asset carries from its own assessed condition and from its position.

Your team can investigate what drives that exposure, trace it through dependency paths, and derive risks and control requirements in context. As conditions change, those effects carry through the model, so you can explain why the risk picture has changed.

INTRINSICSTRUCTURALEFFECTIVE EXPOSURE = INTRINSIC + STRUCTURAL

Capabilities

  1. 01

    Derive risks and control requirements

    Agent enabled
    • Build factor-based assessments across risk domains using included taxonomies or your own.
    • Derive risks and control requirements from operational data and assessments.
    • Complete assessments directly or use AI agents to prepare and revisit them, with your team retaining review and approval.
  2. 02

    Calculate exposure across dependencies

    • Calculate effective exposure from an asset's own assessed condition and position.
    • Trace how risk propagates through the operating model using explicit, consistent, versioned rules that can be interrogated by your team.
  3. 03

    Keep risk under continuous review

    Agent enabled
    • Continuously monitor internal and external signals for changes relevant to your operations.
    • Trigger AI agents to investigate emerging information and prepare sourced assessment updates for your team to review.
    • Automatically recalculate exposure as signals, operational conditions, and approved assessment updates change the risk picture.
  4. 04

    Compare risk models across domains

    • Apply governed methodologies and custom models to the same digital twin.
    • Compare approved scores with live results from exploratory models.
    • Bring cyber, technology, geopolitical, operational, and other risk types into the same operational context.
  5. 05

    Uncover risk patterns and concentrations

    • Identify shared vendor exposure, geographic clustering, and reliance on common technologies.
    • Explore how those concentrations connect to assets and services across the business.
    • Break down scores to understand their contributing factors and dependency paths.
  6. 06

    Investigate risk through conversation

    AI enhanced
    • Ask questions about risk scores and exposure in natural language.
    • Follow the factors and relationships behind a finding to understand what drives it.
    • Ground the discussion in the assessments, operational data, and dependencies represented in your digital twin.

OUTCOME

Make your operations computable.Understand risk as your business changes.

Iroko Canopy turns operational data, assessments, and dependencies into a connected view of exposure. Agents investigate changing conditions and prepare updates for your review, while risk calculations reflect evolving inputs. Your team can see what changed, trace why it matters, and explain the risk picture behind its decisions.