Construction & Engineering · ISO 31000:2018

Sharper Risk
Management.

app.rysc.ai · Risk Entry
Pre-treatment assessment — DNDEMO Step 2 of 4
Cause
Inadequate site access during peak haul activity
Consequence
Vehicle / pedestrian conflict — potential serious injury
Likelihood
Possible
Exposure
Weekly
Severity
High
92
Review band
Approaches intolerable · PM discretion required
216
LES scoring combinations
3-zone
Controlled · Review · Intolerable
ISO 31000
2018 aligned
HSWA
2015 s23/s24 triage
Who it's for

Rigorous risk analysis.
Not just a register.

Risk assessment is a judgement call. The problem is that judgement is inconsistent — the same risk, assessed twice, rarely produces the same answer. That gap is where liability lives.

Rysc Ai structures the assessment so the scoring is repeatable, the reasoning is documented, and the result is something a practitioner can explain without referring to a manual.

Sweet spot
Risk & project management businesses
5–30 person businesses running concurrent packages. Your methodology is your differentiator — Rysc Ai makes it visible.
Good fit
Engineering & design practices with SiD obligations
Principal designers who need quantitative risk records, not just a H&S plan.
Good fit
Tier 1–2 contractors on $5M–$100M packages
Demonstrating risk maturity to clients and insurers without an enterprise commitment.
Why quantitative scoring matters

Three things a heat map
can't do.

The same risk, assessed twice, should get the same answer.

Traffic-light registers collapse professional judgement into a colour. LES scoring with fuzzy number bounds structures that judgement — shared language, documented reasoning, a result that holds up to scrutiny.

The report writes itself.

AI-generated narrative from live project data — threshold watch, treatment financials, workflow status — formatted for client submission. From a complete register to a deliverable in one click.

Specialist coverage is automatic, not manual.

Specialist modules triage by project type and location. The platform applies what's relevant and flags what might be missing — before it becomes a gap in your submission.

ISO 31000:2018 — implemented clause by clause
Clause 5.4.1
Risk Identification
Structured cause-consequence capture across six domains with AI-assisted analysis via RyscAid.
tap to flip
Risk Identification

ISO 31000 requires risks to be identified systematically. Cause → consequence structure ensures consistent descriptions that can be compared and aggregated across the register.

ISO 31000 cl.5.4.1
Clause 5.4.2
Risk Analysis
Triangular Fuzzy Number methodology with L×E×S decomposition and expert AI module prompting.
tap to flip
Risk Analysis

The standard requires analysis using 'consistent criteria'. TFN decomposition into three components with defined scales produces consistent, comparable results across assessors and projects.

ISO 31000 cl.5.4.2
Clause 5.4.3
Risk Evaluation
Three-zone threshold system — Controlled, Review, Intolerable — with automatic zone classification.
tap to flip
Risk Evaluation

Evaluation means comparing risk against defined criteria to decide what needs treatment. Three zones with numeric boundaries (0–60, 60–110, 110+) give each risk a clear action category.

ISO 31000 cl.5.4.3
Clause 5.5
Risk Treatment
Hierarchy of controls, Monte Carlo cost simulation, and cost-benefit analysis for evidence-based decisions.
tap to flip
Risk Treatment

Treatment selection requires weighing cost against effectiveness. Quantitative cost modelling supports evidence-based treatment selection at committee level.

ISO 31000 cl.5.5
Clause 5.6
Monitoring & Review
Version history on every risk, workflow state machine, complete audit logging, and aging analysis.
tap to flip
Monitoring & Review

Version history and aging analysis make stale risks visible so they get re-assessed and closed. The state machine enforces review at each workflow transition.

ISO 31000 cl.5.6
Clause 5.7
Recording & Reporting
Executive reports (PDF + Word), treatment dashboards, CSV export, and print-ready views for committee.
tap to flip
Recording & Reporting

The standard requires recording and reporting as part of the risk management process. Preformed dashboards and charts provide the visual evidence that your process is working.

ISO 31000 cl.5.7
Clause 6.7
Continual Improvement
RyscInsights captures lessons learned at closure — what happened, what worked, what didn't.
tap to flip
Continual Improvement

The same risks recur across projects. A searchable lessons library means the next project team starts with institutional knowledge, building on what was learned before.

ISO 31000 cl.6.7
Principle 7
Human & Cultural Factors
Bias reduction through structured L×E×S decomposition and range-based inputs for defendable assessments.
tap to flip
Human & Cultural Factors

Anchoring, recency bias, and unfamiliarity effects are well-documented in risk assessment. Structured decomposition and range-based inputs are practical countermeasures built into the scoring workflow.

ISO 31000 Principle 7
Compound risk scoring

One risk.
Multiple exposures.

Most platforms score a risk once, in one domain. But a single event — a contractor default, a structural failure, a reputational incident — carries simultaneous exposure across safety, cost, time, quality, and reputation.

Rysc Ai calculates a compound vector score — the Euclidean magnitude across all active domains. Adjust the sliders to see how domain scores combine into a true composite exposure.

Loading interactive model…
The risk envelope

All 216 combinations.
Visualised.

Every possible combination of Likelihood, Exposure, and Severity — plotted in three dimensions. Drag to rotate. Hover any point to inspect its score. The envelope makes the scoring model transparent.

Loading interactive model…
The platform

Every feature
earned its place.

LES scoring · Controlled / Review / Intolerable

Likelihood, Exposure, Severity scored in shared language across six descriptive levels. S^1.2 severity weighting. Triangular fuzzy number bounds capture the range of professional judgement — optimistic, most-likely, pessimistic. Three-zone thresholds drive workflow automatically.

AACE 41R-08 aligned · weighted geometric mean · fuzzy number uncertainty bounds
RyscAid · AI risk coach

RyscAid does more than fill in values — it challenges the assessment. Describe a cause and consequence, and RyscAid identifies exposure domains the assessor may not have considered, asks whether adjacent risks have been captured, and recommends LES values with plain-language reasoning. It acts as a second opinion before the entry is committed — reducing the gaps that come from working in isolation.

Domain exposure check · gap identification · LES reasoning · treatment draft · context-aware from project history
Executive reports · PDF + editable Word

AI-generated narrative with threshold watch, top risks, treatment financials, and workflow status. The report speaks in outcomes — what is at risk, why it matters, what has been done. No LES notation exposed in client output.

What / So What / Now What structure · PDF download · editable Word for client submission
Multi-project · multi-tenant · full audit trail

Schema-per-tenant database isolation. Role-based access — PM, Moderator, Risk Manager. State machine workflow with PM approval. Compound vector scoring across domains. Immutable audit trail. HSWA s23/s24 notifiable risk triage on every entry.

NZ Privacy Act 2020 · GDPR · Certificate of Deletion
Specialist modules

Applied automatically.
Confirmed by you.

Each specialist module structures the assessment across five tiers — moving from hazard presence through to compliance documentation. RyscAid pre-selects the relevant modules from your project data and identifies gaps the assessor may not have considered.
Tier 0 · Gateway
Is the hazard actually in play? Gateway question gates all downstream tiers.
Tier 1 · Risk Environment
Observable facts and measurements — what is present and how much of it.
Tier 2 · Context
Setup, configuration, and site environment — the conditions around the hazard.
Tier 3 · Controls
Protections and mitigations in place — engineering, administrative, PPE hierarchy.
Tier 4 · Compliance
Administrative and documentation — records, notifications, certifications.
Activity-based — discrete operations · JSA and SWMS territory
🪜 Work at height ⛏️ Excavation 🔥 Hot work & fire 🕳️ Confined space 🏗️ Crane & lifting ⚡ Electrical safety 🚧 Traffic management 🏚️ Demolition 🔩 Temporary works ⚡ High voltage
Condition-based — systemic exposure · management plan territory
☣️ Hazardous substances 💨 Combustible dust ⚙️ Machine guarding 🩺 Worker health 🧱 Seismic 📢 Reputation ✅ Quality 📜 Contract risk
Modules expand continuously — new domains added as the platform grows.
Pricing

Scales with
your business.

Contact us to discuss plans. Volume and enterprise arrangements available.
Core Safety
Contact us
Per project · monthly
  • LES scoring · three-zone thresholds
  • Activity-based specialist modules
  • RyscAid AI analysis
  • Executive report — PDF + Word
  • PM approval workflow
  • Email notifications
Professional
Contact us
Per project · monthly
  • Everything in Core Safety
  • All specialist modules — activity + condition
  • Compound vector scoring
  • Treatment cost modelling
  • HSWA s23/s24 notifiable triage
  • Unlimited projects and users
  • Priority support
Enterprise
Custom
Tailored for large organisations
  • Everything in Professional
  • On-boarding and training
  • Dedicated account management
  • Volume licensing
  • Custom module development