Inside the app
Enterprise risk mapped to director duties. ISO 31000-aligned. Live, categorised, owned, and rolled up to the board.
Risk register as a Word document, updated once a year for the annual report
Controls named but never verified — the register says the control exists, nobody checks
Mitigation actions drifting in meeting minutes, unowned
No roll-up to the board between annual reviews
Director duties carried by the board without a clear view of where personal liability concentrates
I sign off on a risk register once a year and I have no idea if anything in it is being actively managed.
Chair, Junior Developer, WA
We had a risk on the register for 18 months before anyone noticed there was no control actually in place.
CFO, Junior Explorer, SA
Rated by impact and likelihood. Named owner. ISO 31000-aligned.
Controls linked to field HSE assessments for operational risks.
Top 10 risks. Changes since last board. New risks. Risks retired.
Auto-generated for the board pack. No CFO assembly job.
| Capability | Word Risk Register | Protecht / CAMMS / Riskware | MineOne |
|---|---|---|---|
| Live register | No | Yes | ✓ Yes |
| Director duty mapping | No | No | ✓ Yes — unique to MineOne |
| Controls verification | No | Yes, heavy config | ✓ Native |
| Board roll-up | Manual | Separate module | ✓ Live in board pack |
| Price for junior miner | Sunk cost | $40K–$250K/yr | ✓ Fit-for-purpose |
| Implementation time | None | Months | ✓ Weeks |
Junior miner directors carry personal liability across ASIC, ASX Listing Rules, Corporations Act, WHS legislation, and environmental law. Most directors cannot, at any given moment, tell you which risks on the register concentrate their personal exposure.
MineOne maps every risk to the director duty it touches. Once a Chair sees personal liability mapped live, they will not go back to a Word document.
Personal liability visible
You carry personal liability under Corporations Act, ASX Listing Rules, and environmental law. You want to see which risks on the register concentrate your exposure.
Owns register, needs lighter tool
You own the risk register as a de facto job. You want something faster and lighter than Protecht or CAMMS.
Replacing Word model
You manage the register. You want a tool that allows you to own the register without it becoming a full-time job.
ISO 31000 is the international standard for risk management. MineOne's risk categorization (strategic, operational, financial, compliance, HSE, environmental, cyber) and control verification follow ISO 31000 principles, making it easy for auditors and insurers to navigate.
Each risk on the register is mapped to the director duties it touches — Corporations Act, ASX Listing Rules, WHS legislation, environmental law, etc. When a risk moves on the heat map, the affected director duties are flagged. This is unique to MineOne.
Yes. The risk register and controls verification are exportable in a format insurers and auditors can traverse. You can share a snapshot of the register with your insurer at renewal without email back-and-forth.
No. It replaces the tools a risk consultant uses inside your company. If you employ a consultant to build the register, MineOne is where they work. If you have an internal risk owner, MineOne is their system.
Cyber risk is one of the register categories. It is rated by impact and likelihood. Controls are named and verified. If you employ a cyber consultant, they can be assigned as an approver for cyber risk assessments.
Yes. The heat map can be filtered by category, owner, director duty, or trend. You can see all risks that touch a specific Corporations Act duty, or all risks owned by the MD, or all high-trend risks.
Ready to move risk management from annual documents to live registers?
Book a Compliance Walk-Through