The enterprise risk &
resilience cockpit
Bring risk governance, business continuity and live crisis command into one sovereign European cockpit and move from risk to response without losing context, across ISO 31000, ISO 22301 and DORA.
See your exposure and your resilience in one place
and act before it becomes a crisis
Risk registers, continuity plans and crisis war-rooms usually live in separate tools that don't talk to each other. When an incident hits, context is lost and the clock is already running.
Citadel unites the rigour of an analyst-grade risk register, the depth of a business-impact analysis and the reactivity of a real-time crisis command centre, on one data, roles and audit foundation, hosted in a sovereign European environment.
One foundation, from risk register to crisis room
A living, appetite-aware risk register
Every risk scored on a matrix with its owner, appetite status (in or above), trend and next review. The cockpit surfaces what sits above appetite and where treatment is falling behind.
Continuity you can prove
Map your critical processes and their BIA (MTPD, RTO, RPO and key dependencies) track plan status and last exercise, and read your Tier-1 coverage at a glance. Built for ISO 22301 and DORA.
From risk to response, with no re-entry
Activate a plan in one click, arm the crisis cell, notify stakeholders across channels and log every action on a single timeline, with DORA major-incident clocks tracked end to end. A materialised risk becomes an incident without re-keying.
Modular by design
Risk cockpit
KPIs, a 5×5 heatmap and your resilience posture (RTO / RPO / MTPD) on one consolidated, read-only view.
Third-party & supply-chain resilience
Map critical suppliers by tier, spot single points of failure, score resilience and hold contingency plans.
Regulatory-ready by design
Dedicated reporting, DORA notification workflow and a full audit trail for ACPR and FCA.
Four modules, one resilient organisation
Risk cockpit & register
- Consolidated cockpit: KPIs, a 5×5 heatmap and your resilience posture on one screen.
- Full register: inherent & residual scores, appetite status, trend and next review.
- Automated periodic reviews with reminders and escalation.
Business continuity
- Critical processes & BIA with MTPD, RTO and RPO.
- Key dependencies: systems, suppliers, sites and key people.
- Plan status and last exercise, with coverage and freshness indicators.
Crisis command
- Active crisis view with level, incident commander and impacted processes.
- Crisis cell with armed roles and a time-stamped action timeline.
- Multichannel notification and the DORA workflow: initial ≤ 4h, interim ≤ 72h, final ≤ 1 month.
Third-party risk
- Critical suppliers by tier with a red / amber / green resilience score.
- Single points of failure and questionnaire status.
- Exit and contingency plans, with concentration and dependency mapping.
Five platforms, one standard
Discuss your mandate, in confidence.
Every engagement begins with a confidential conversation
about the decision, transaction or exposure in front of you.