Torus — Cyber · Risk · AI
Menu

Risk analysis

A scenario-based risk analysis, ready for your board and the regulator.

Torus proposes scenarios fitted to your context, prepares the rating of current and target risk, then a treatment plan. Your team reviews every proposal. Deliverables come out as PDF and Excel, and the ILR NIS2 templates are pre-filled.

Request a demo See the method
  • A method, not a prompt.
  • Scenarios, not an inventory.
  • Explicit rating rules.
  • Human validation.
Risk analysis · revision 2 sample data
ScenarioCurrentEstimated targetTreatment
Ransomware on the serversHighModerateReduce
Compromise of a supplierHighModerateReduce
Spear phishing against managementModerateLowReduce
Client service outageModerateModerateAccept

Sample data · the target depends on the measures selected.

Method

Scenarios, validated decisions.

A scenario-based method, aligned with the principles of ISO/IEC 27005. The AI prepares each step; your team reviews, corrects and decides.

  1. Frame the context

    Sector, activities, services and constraints. Missing information becomes optional questions: it never interrupts the analysis.

  2. Assess the scenarios

    Torus proposes a short set of scenarios fitted to your context; you keep, adjust or discard them.

  3. Rate the risk

    Inherent risk, residual risk with your existing controls, estimated target: every level is justified, then reviewed.

  4. Treat and freeze

    Torus proposes measures drawn from good practice. You decide, you explicitly accept what must be accepted, then you freeze a revision.

Deliverables

Deliverables ready, not a black box.

A validated revision is frozen. Its reports are archived as they are and gathered, for each language, into a ZIP archive.

01

A PDF summary for the board: a few simple indicators, readable outside the IT team.

02

A full PDF report and an Excel workbook, in French, English or German.

03

For Luxembourg, the four official ILR NIS2 templates pre-filled: analysis of risk scenarios, multi-year action plan, measures in place, dependencies.

04

A decision history: who validated what, and on which revision.

Guardrails

The AI prepares, your team decides.

01

Residual risk only goes down when a confirmed existing control acts on impact or likelihood.

02

The estimated target counts only the measures selected; accepting or transferring a risk never lowers its rating.

03

Accepting a risk is explicit, justified and recorded.

04

The ILR templates prepare your review: Torus submits nothing to the ILR and does not replace your own check of the applicable obligations.

Run an analysis on your context.

A risk analysis demo speaks louder with your sector, your essential services and your regulatory constraints.

Request a demo NIS2 in Luxembourg