NEW: the ISO 14001:2026, ISO/IEC 17020:2026 and FSSC 22000 V7 documentation kits are now available.

Interactive tool ยท ISO 9001:2015 and 2026

ISO 9001 Risk & Opportunity Register

See which risks are out of control and whether your actions work. Every risk traced to its context, scored before and after treatment on a live heat map, and your management review input built in one click.

  • Works offline, no installation
  • Heat map, trace, review pack
  • Demo company, then start blank
  • Light, dark and phone

One-time payment. No subscription. Instant download.

One HTML file that keeps your context issues, interested parties, risks, opportunities and actions in a single linked register, built for ISO 9001 clause 6.1 and the clauses around it: 4.1, 4.2, 9.1.3 and 9.3.2. Choose ISO 9001:2015 or ISO 9001:2026 in Settings, and every clause reference, readiness check and Review Pack section follows the edition you chose. For quality managers, management representatives and the consultants who support them.

What you will be able to do

  • Answer "how do you evaluate the effectiveness of your actions?"Every action carries an effectiveness criterion, an evaluation date 90 days after completion by default, and a verdict: Effective, Partly effective or Not effective (9.1.3 e)).
  • Show where every risk comes fromEach risk and opportunity is linked to the context issue (4.1) or interested party requirement (4.2) behind it. Issues that lead nowhere are flagged.
  • Prove that treatment worksInherent, residual and target scores on a 5x5 matrix, with an arrow for each risk that moved and a score history kept for every reassessment.
  • Bring a ready input to management reviewThe Review Pack builds the risk and opportunity input for any period, with figures, charts and tables, ready to print on A4 or export to CSV.
  • Move to ISO 9001:2026 when you are readyOne setting switches every clause number and label. Your data does not change; opportunities move to 6.1.3 and the readiness checklist grows from 11 to 16 checks.

Three things your spreadsheet cannot do

Heat map in residual mode with arrows from the inherent cell to the residual cell of each risk
1Clauses 6.1.2 and 9.1.3 e)

A live heat map that shows your risks move

Every risk is a dot on a 5x5 likelihood and impact matrix. Switch between Inherent, Residual and Target and the dots move to their new cells. "Show movement" draws an arrow from the inherent to the residual cell of each risk, in red when a risk went up. Click a cell to list its risks. A second tab places your opportunities on a benefit and feasibility matrix. Thresholds and cell levels come from your Settings.

Context Trace audit readiness checklist with 10 of 16 checks passed under ISO 9001:2026
2Clauses 4.1, 4.2 and 6.1.1

From context to proof of effectiveness, in one line

Four linked columns: sources (4.1 issues and 4.2 requirements), risks and opportunities, actions, effectiveness. Click any card to light its full chain, or show the gaps only. An audit readiness ring runs the checklist of your edition, 11 checks in 2015 and 16 in 2026, and each failed check opens the exact items to fix: an issue with no risk, an action never evaluated, a review overdue.

Review Pack under ISO 9001:2026 with the sections 9.3.2 g) and h), exposure trend and inherent to residual chart
3Clause 9.3.2

Your management review input, for 2015 or 2026

Pick a period and the Review Pack writes the input on risks and opportunities from your records: changes in issues, effectiveness of actions, inherent to residual movement, exposure trend and opportunities for improvement. Sections are lettered as in your edition, 9.3.2 b), e), f) for 2015 or b), c), e), g), h) for 2026, each with a comments box. Print on A4 with a cover, or export the tables to CSV.

Stop rebuilding your risk register the week before the audit

39 USD, one-time payment. Open the file and work, offline, from the first minute.

Buy the tool, 39 USD

What's inside

Dashboard

The share of risks within your appetite, critical and high risks, overdue actions, action effectiveness and audit readiness. Then the residual heat map, the inherent to residual movement of your top risks, residual level by process, the exposure trend over 12 months, actions by status and an attention list sorted by severity.

Dashboard charts with residual level by process, exposure trend and actions by status
Heat map and opportunity matrix

Inherent, residual and target views of your risks, filters by process, category and owner, and a benefit and feasibility matrix for opportunities, coloured by priority. Prints on A4 landscape.

Opportunity matrix of benefit and feasibility
Risks and score history

Each risk written as cause, event and consequence, with its sources, process, owner, inherent, residual and target scores, and one of the six treatment options listed in the standard. A proportionality check against your own rule, top management approval of retained risks, and a score history chart over every reassessment.

Risk drawer with the score history chart and the list of assessments
Opportunities

Each opportunity scored on benefit and feasibility, with its priority, decision (Pursue, Under evaluation, Defer, Reject), associated risks, and expected and realised benefit with the realisation rate.

Opportunities register with priority, decision and realised benefit
Actions and effectiveness

Actions integrated into your processes, with owner, due date and an effectiveness criterion required before an action can be marked done. Record the verdict and the evidence; a Not effective verdict sends the risk back for reassessment.

Form to evaluate the effectiveness of an action against its criterion
Context issues and climate change

External and internal issues by category and effect, each with its review date and its linked risks and opportunities, plus the climate change determination card.

Context issues page with the climate change determination card
Interested parties and their requirements

Parties placed on an influence and interest grid, their requirements, which ones are relevant to your QMS, and under 2026 whether each is addressed through the QMS (4.2 c)).

Interested parties page with the influence and interest grid
Reassessments and timeline

Every assessment kept as history, with its trigger and the score before and after. Assessments are never deleted, an edit asks for a reason, and a risk with history can be closed, not deleted.

Risk drawer timeline with every assessment, action and decision
Settings: edition, matrix and your rules

Choose ISO 9001:2015 or 2026, set your thresholds and acceptance level, override the level of any cell of the matrix, edit the scale labels, review frequencies and your proportionality rule. Clause chips, checks and the Review Pack follow the edition.

Light, dark and phone

Switch between a light and a dark theme. The layout adapts to a phone screen.

Light and dark themes

See it in action

The demo company, from the "Your data" settings to the heat map, the Context Trace and the Review Pack.

Your data stays with you

No account, no cloud, no subscription. The register lives in your browser, and you keep the backup with your QMS records.

Settings screen with the ISO 9001 edition choice and the Your data card: download a backup, restore, load the demo organization, start blank
  • Works offline. One HTML file that opens in your browser. Nothing to install, no internet connection needed.
  • Nothing is sent anywhere. Your records are stored in this browser only.
  • Backup in one click. The backup status is always shown at the top of the screen. Restore it on the same or another computer.
  • Demo, then blank. Load the demo organization, a moulding company with every screen filled, then start blank with your own context.

Who this tool is for

  • Quality managers
  • Management representatives
  • ISO 9001 certified SMEs
  • Companies preparing ISO 9001 certification
  • Companies moving to ISO 9001:2026
  • Consultants building a QMS for clients

Requirements

BrowserChrome, Edge, Firefox or Safari.
ComputerWindows or Mac.
InstallationNone. You open the HTML file, that is all.
PhoneThe layout adapts to a phone screen.
InternetNot needed to use the register.
LicenceSingle user, on one computer.

How to get it

  1. 1
    Buy the tool39 USD, one-time payment, secure checkout.
  2. 2
    DownloadThe register file and the Quick Start Guide (PDF) from your order.
  3. 3
    Open itDouble-click the file. It opens in your browser, offline.
  4. 4
    Explore, then startWalk through the demo company, choose your edition, then start blank with your own context.

Frequently asked questions

Is there a subscription?

No. You pay 39 USD once. Updates of version 1 are free.

Does it follow ISO 9001:2015 or ISO 9001:2026?

Both. ISO 9001:2015 is the default; choose 2026 in Settings and every clause number, label, readiness check and Review Pack section follows. Switching changes no data, so you can switch back at any time. Help explains that the 2026 clause titles are English renderings.

Does ISO 9001 require a risk register?

No. ISO 9001 asks you to determine and address risks and opportunities, and to evaluate the effectiveness of your actions, without imposing a formal method. The register is one way to do it and to show it to your auditor.

Which browsers and computers does it work on?

Chrome, Edge, Firefox and Safari, on Windows and Mac. It is a file opened by your browser. It also adapts to a phone screen.

Can several people use it?

No. One licence covers one user on one computer. For a colleague, buy a second licence. Your data lives in the browser of your computer, with no sync between computers.

How do I move to another computer?

Download a backup in Settings, copy the HTML file and the backup to the new computer, open the file and restore the backup.

What happens if I clear my browser data?

The register stored in that browser is erased. Restore your latest backup and you are back where you were. The backup status is shown at the top of every screen.

Can I import my current Excel register?

Yes, through CSV. Issues, interested parties, risks and actions import with a column mapping step, rejected rows are reported with the reason, and every register exports to CSV that opens in Excel.

Can I adapt the matrix to my method?

The matrix is 5x5, score equals likelihood times impact. You set the level thresholds, the acceptance level, the scale labels and the level of any single cell. A 3x3 or 4x4 matrix is not available in version 1.

What is out of scope?

Full enterprise risk management, FMEA, quality objectives, and the management of nonconformities, corrective actions and changes (a reference field is provided for each).

Know which risks are under control, from tomorrow morning

39 USD, one-time payment, no subscription, instant download.

Buy the tool, 39 USD

Complete your ISO 9001 system