Skip to main content
preeco | whistleblower

Detailed Risk Assessment

Systematically assess each report with a risk matrix and document circumstances, causes, consequences, and measures taken. Structured risk assessment for well-founded decisions.

RISK MATRIX

4x4 Risk Matrix for Assessment

Assess reports using a 4x4 risk matrix based on probability of occurrence and severity of damage. The matrix visualizes risk with color coding and provides an objective basis for prioritization and resource allocation. The optional AI risk analysis supports the initial assessment: it summarizes the report and proposes risks with probability of occurrence and severity of impact – as editable suggestions that are never adopted automatically.

  • Color visualization from green to red
  • Assessment by probability of occurrence and severity of damage
  • Objective basis for prioritization
  • Traceable and documented risk assessment
  • AI risk analysis (optional): suggestions with probability and severity – never adopted automatically
app.preeco.de
4x4 Risk Matrix for Assessment

CAUSE AND IMPACT ANALYSIS

Document Facts, Causes, and Consequences

Document the circumstances of the reported violation in detail and identify the causes. The impact assessment evaluates actual and potential consequences and supports prioritization and escalation.

  • Detailed description of involved persons, locations, and events
  • Root cause analysis: system error, human error, or deliberate action
  • Assessment of financial, legal, and reputational consequences
  • Basis for targeted preventive measures
app.preeco.de
Document Facts, Causes, and Consequences

MEASURES

Measure Tracking with Status Monitoring

Record specific measures to address the violation and prevent recurrence. Each measure is assigned a responsible person and a status – tracking ensures that remediation actually takes place and is documented in a verifiable manner.

  • Record measures with responsible persons and target dates
  • Store recurring risks and measures centrally as team-wide templates
  • Apply them in the report via the "Apply from template" selection field
  • AI measure suggestions (optional): proposals based on the report and recorded risks, including responsibility for implementation – never adopted automatically
  • Status tracking: planned, in progress, completed
  • Evidence of remedial measures taken
  • Traceable documentation for audits and authority requests
app.preeco.de
Measure Tracking with Status Monitoring

Free · self-check

Do you need an internal reporting office?

Find out in two minutes whether the German Whistleblower Protection Act applies to you and where your reporting channel has gaps today, with the legal reference for every point.

Start the check

Up to 7 questions · 2 minutes

FAQ

Frequently asked questions

In the Information tab, you record one or more risks for a report with a description, potential damage, probability of occurrence and severity of impact. The 4×4 risk matrix places each risk accordingly and uses color to show where action is needed. You also document the measures taken in response to the risks – including who is responsible for implementing them.

With risk and measure templates: you store recurring risks and measures once, centrally, under Settings → Templates. When recording them in a report, you select a template in the selection field; it pre-fills the form and every field remains editable. Templates apply team-wide and contain only the general part – case-specific details such as the implementation date or status of a measure are added in the report.

No. The optional AI risk analysis summarizes a report, assesses it and suggests risks with probability of occurrence and severity of impact; the AI measure suggestions build on the risks already recorded. Nothing is applied automatically: you select suggestions individually and edit them before saving. The AI does not change a status and does not replace legal review – you work with AI and your team, and the decision stays with the reporting office.

Yes. The risk matrix, risks, measures and templates are part of the standard functionality and work entirely without AI. The AI functions are switched off on delivery; AI elements appear in a report only once administrators activate them for the team and enable them for individual users. You provide the AI provider and access key yourself. Without activation, no content leaves the application.

For each report, you record measures with a description, responsibility, implementation date and status. Accepted AI suggestions are treated and logged like manually entered measures. The activity log records changes to risks and measures with the old and new value, time and person. For audits or authority requests, export the report including its risk assessment as PDF, DOCX or ZIP.

Yes. On the dashboard, add the risk overview card with the risk matrix, alongside cards such as reports by priority or reports by area of application. Each person arranges their own dashboard, and every card shows only reports the viewer is allowed to see. Tiles and lists link directly to the counted reports in the report overview.

Convinced? Request a Consultation Now

We will show you how the risk assessment in preeco | whistleblower structures and documents your case management.