Quantifying Risk Check Results on a 100-Point Scale: "2sen no Takumi Cloud" Releases "Risk Check Response Scoring Function"

SecureNavi Inc. (Headquarters: Minato-ku, Tokyo; CEO: Tomohiro Izaki) is pleased to announce the release of the "Risk Check Response Scoring Function" for its security risk assessment cloud service, "2sen no Takumi Cloud," which is designed for second-line departments (departments responsible for security, risk management, and compliance). This new function scores risk check responses on a 100-point scale.

This feature allows for objective and quantitative understanding of risk check results, which were previously limited to qualitative confirmation, for areas such as vendor assessments and internal system evaluations. It automatically aggregates responses from security check sheets to calculate an overall score, and also supports score display by category and in various lists, creating an environment where the risk levels of multiple managed targets can be compared across the board.

Background and Challenges

In risk check operations necessary for inter-company transactions and the use of cloud systems, many companies review the content of security check sheet responses but lack a system to aggregate these results numerically. Consequently, it has been difficult to objectively grasp "which assessment targets have high risk levels" or "whether risks have improved compared to the previous period," and to compare the risk status of multiple managed targets, such as vendor assessments and internal system evaluations, across the board.

To address these challenges, we have newly developed and added the "Risk Check Response Scoring Function" to "2sen no Takumi Cloud."

Overview of the New "Risk Check Response Scoring Function"

This function automatically calculates a score out of 100 by assigning points (2 points for green, 1 point for yellow, 0 points for red, and not applicable for gray) to the response options in the check sheets. The scoring function can be selected for use on a per-risk check sheet basis and supports a wide range of operational styles, from overall evaluation to detailed analysis by category, approval workflows, and score confirmation in various lists.

What You Can Do with This Function

Automatic calculation of a 100-point score based on response colors (gray responses are excluded from the denominator)

Score aggregation by custom column category (e.g., major classification, sub-classification, control measure category)

Display of overall and category-specific scores on the approval workflow (approval request, approval step) screens

Color-coded display: orange for below target, green for achieved

Display of scores on the risk check detail screen, bulk risk check list, and individual risk check list screens

Addition of a "Latest Score" column to the managed target list (displays the score of the most recent risk check that has been approved)

Future Developments

With the release of the Risk Check Response Scoring Function, the foundation for quantitatively and objectively understanding vendor risk assessments has been established. "2sen no Takumi Cloud" will continue to advance evaluation sophistication, including visualization of score trends and target setting functions. Our aim is to evolve risk check operations from "processing checklists" to "continuous management of risk levels," thereby supporting the work of second-line department personnel.

About "2sen no Takumi Cloud"

"2sen no Takumi Cloud" is a risk assessment cloud service for second-line departments that covers check operations such as "vendor assessment" and "internal system assessment." It supports individuals in the second line (security departments, compliance departments, risk management departments) within the Three Lines of Defense model in continuously operating risk check tasks. Official Website: https://fitgap.jp/audit

About SecureNavi Inc.

Company Overview

With a vision to "quickly solve the sad news of security for humanities majors with technology," we are a company that solves information security challenges with software.

Company Name: SecureNavi Inc.

Representative: Tomohiro Izaki, CEO

Established: January 2020

Location: Shirakawa Showroom Bldg. 4F, 3-23-6 Nishi-Shimbashi, Minato-ku, Tokyo, 105-0003

Corporate Website: https://secure-navi-inc.jp

Services Provided

ISMS/P Mark Automation Tool "SecureNavi" https://secure-navi.jp

Platform for Automating and Streamlining Compliance with All Security Regulations "Fit&Gap" https://fitgap.jp/fg

Security Risk Assessment Cloud for Second-Line Departments "2sen no Takumi Cloud" https://fitgap.jp/audit

Security Check Sheet Automatic Response Tool "SecureLight" https://secure-navi.jp/securelight