Rukn ERM replaces the spreadsheets, email chains and disconnected tools that hold a risk function together. Every module maps to a COSO ERM 2017 component, stays readable offline, and speaks both Arabic and English.
Nine connected modules — not nine separate tools. Change a control rating and residual scores update; breach a KRI threshold and the owner is alerted.
Identify, score and track risks on a 5×5 inherent-and-residual matrix, with control effectiveness built into the residual score.
Risk register software →Set thresholds and measurement cycles, log readings, and get alerted the moment an indicator breaches its red threshold — or the moment a reading falls overdue. Point a KRI at the control it monitors and the KRI shows that control's latest rating and when it was last tested.
KRI software →Define appetite and tolerance per category and see breaches surface automatically as risks move.
Map controls to risks and let residual scores update automatically. Record each test with its date, tester and rating so a control has a history rather than a number, attach the sample or sign-off behind it, and get alerted when one is rated ineffective.
Capture events, assign corrective actions, and track them to closure with due-date reminders.
Manage committees and policies with review cycles, owners and automatic reminders.
Track frameworks and requirements, map them to controls, and evidence your compliance posture.
Plan audits, raise findings, and drive remediation to done — linked back to the risks and controls they touch.
Quantify aggregate annual loss and value-at-risk, and ask an AI assistant questions about your own live risk data.
Qualitative heat maps tell you what's red. Monte Carlo simulation tells you what it could cost. Add optional probability and min/likely/max loss to any risk and Rukn runs thousands of iterations to model your aggregate annual loss and value-at-risk.
10,000 iterations · 8 quantified risks
Type a plain-language question and get an answer grounded strictly in your organisation's own records — never a generic chatbot. "What are my top cyber exposures?" "Which controls are rated ineffective?" "Summarise open audit findings." The assistant reads your live data and answers, with the numbers to back it.
A control rated effective with nothing behind it is an assertion. Attach the file that supports the judgement — the sample sheet, the screenshot, the signed approval — to a risk, an incident, a policy, an audit finding or a control test, and the rating becomes a finding somebody can check.
CTL-0014 · Quarterly access review
Run your risk program from a phone — capture an incident on-site, approve an action from a meeting, review the heat map anywhere.
Every screen, notification and exported report — switch language in a single tap, with proper right-to-left layout.
Your register, dashboards and indicators stay readable with no signal — cached on the device and refreshed automatically when you reconnect.
Export executive Excel workbooks, PowerPoint decks and PDF summaries — in the reader's language, right-to-left when Arabic.
Biometric app lock, role-based access, optional MFA and full tenant isolation. See security →
Start fast with ready risk taxonomies for finance, healthcare, manufacturing, technology and retail.
Yes. Every module maps to one of the five COSO ERM 2017 components — governance & culture, strategy & objective-setting, performance, review & revision, and information, communication & reporting. Rukn is an independent product aligned to the framework; it is not affiliated with or endorsed by COSO.
Yes — the entire interface, notifications and exported reports are available in Arabic with full right-to-left layout, and users can switch between Arabic and English at any time.
Yes, for reading. Your register, dashboards and indicators are cached on the device, so you can review them with no signal and they refresh automatically when you reconnect. Creating and editing records currently needs a connection.
The assistant answers only from your own organisation's live records, is strictly read-only, and is isolated to your tenant. It cannot change data or see any other organisation's information.
Executive Excel workbooks, board PowerPoint decks and PDF risk summaries — each generated in the user's chosen language, right-to-left when Arabic.
Book a walkthrough and we'll show Rukn ERM working with a register like yours.
Rukn ERM