Riesgo Risk Management is a tool that automates the process of risk management for BS7799, ISO/IEC27001 and ISO9001. It helps Information security Managers, Information Security Consultants, Business unit owners, Asset owners and Auditors to be able adequately assess an organisation's compliance with the associated controls from the objectives. The tool resolves majority of the compliance & Audit issues faced by most organisations that adhered to the principles of ISO9001, BS7799 and ISO27001 by enabling an automated process that provides inherent reporting. Designed to resolve problems Designed by Information security professionals with over 35 years accumulated experience, Riesgo risk management tool was designed by Information Security Consultants and Auditors who devised the solution as a result of resolving issues surrounding risk management and compliance. Some of the key concerns that have been resolved include:  Continual document update  Policy dissemination  Automated reminders on key items and activities  Ability for issues raised by departments to be linked into ISMS forum  Incident alerting  Linkage between ISMS forum and Departmental reports  Internal Audit visibility and end to end engagement  Automated alerting system  Project inclusion  Consolidated asset management  Linkage between risk logs, assets and risk treatment  Real time risk assessment on projects or departments Most other Risk management solutions provide a tedious process that makes it almost impossible for Business units to sustain the engagement.