From risk register to board report in one hour. Every figure is calculated from your data — not one sentence written by an AI.
ISO 31000 framework · Database hosted in Zurich, FADP commitments, DPA on request · Security & data protection →
The overall management of the company, financial control and the overall supervision of the persons entrusted with managing the company are non-transferable and inalienable duties of the board of directors (art. 716a para. 1 CO). Since 2023, it must also monitor the company's solvency (art. 725 CO). It may assign the preparation or the monitoring of certain matters to a committee, but the duty remains its own and it must ensure appropriate reporting to its members. RiskBoard produces a dated, quantified risk report, drawn up by your risk manager — one of the documents the board relies on to exercise its supervision.
A reminder of the framework, not legal advice: the exact scope of your obligations depends on your legal form, your audit regime and the specific legislation of your sector.
Overall management, financial control, overall supervision of the persons entrusted with managing the company: duties the board of directors can neither delegate nor relinquish. It may assign the preparation and implementation of its resolutions, or the monitoring of certain matters, to committees or individual members; it must ensure appropriate reporting to its members.
Since 1 January 2023, the board of directors must monitor the company's solvency and act with the required urgency if the company is at risk of becoming insolvent. An explicit monitoring duty, one that names a risk; it also applies to the limited liability company (art. 820 CO).
The managing directors have analogous non-transferable duties: overall management, financial control, supervision of the persons who are delegated management responsibilities.
Notably where two of the three thresholds are exceeded in two successive financial years (balance sheet total CHF 20 million, sales revenue CHF 40 million, 250 full-time positions on annual average — art. 727 para. 1 no. 2 CO), the management report provides information on the conduct of a risk assessment, and the external auditor verifies whether an internal system of control exists, not the way the board of directors manages the company (art. 728a para. 1 no. 3 and para. 3 CO).
Directors and managing directors (art. 827 CO) are liable for losses caused by an intentional or negligent breach of their duties. A dated register and a report drawn up under a named author trace the information the board had at its disposal and the decisions taken; they do not exclude liability.
A structured register: likelihood × impact, gross and residual, owner, controls. Scales anchored in francs and in frequency — the assessment becomes reproducible.
The 5×5 risk map places every risk and draws the boundary of the appetite set by the board. Whatever crosses it calls for a decision — automatically.
The board report is generated: quantified summary, decisions requested, action tracking. Ready to attach to the notice of meeting.
Cover page, executive summary, risk map, detailed register, decisions requested with approved / refused / postponed boxes, action tracking and an appendix of scales. The PDF goes into the board pack, next to the audited accounts.
The same document as a PDF: “Export as PDF” button on the sample page — A4 format, cover page, footer on every page.
Confidential — for the exclusive use of the board of directors
Helvetia Métal SA · Industry / precision machining
Risk report to the board of directors
Q3 2026
Prepared by C. Berger, Head of Risk
Figures calculated from the risk register — no automatic drafting.
1. Executive summary
The register holds 9 risks: 0 critical, 2 high, 7 medium, 0 low. 2 risks above the appetite set by the board (net level ≥ 12) — decision required (§4).
Priority risks
Helvetia Métal SA · Risk report 2026-Q3 · Confidential — for the exclusive use of the board of directors
Anglo-Saxon GRC suites sell you an AI that “writes” your analysis. We do the opposite: rankings, trends and thresholds are calculated, traceable, reproducible. You sign a document you can explain, line by line.
A log of accidents and near misses, frequency and severity rates calculated the SUVA way. Entered once by your safety officer, they feed the OHS section of the board report — no double entry. Health and safety ceases to be a separate file: it becomes part of your risk governance.
RiskBoard is published by Jaures Adjamonsi, a sole proprietorship established in the canton of Vaud. He holds a degree in finance, with a specialisation in finance and controlling, and works in risk management in the Swiss financial sector — credit insurance and reinsurance.
During the pilot, he is the one who migrates your register, configures your settings and answers your questions — not a customer service department.
Hosting, encryption, isolation, processors, the FADP and what we do not do are set out in black and white: Security & data protection → A question, a need for a DPA, a hosting requirement? Write to contact@riskboard.ch — he replies in person.
Each organisation sees only its own data — strict isolation at database level (RLS), verified by security review. Your risk register is your most sensitive document: it is treated as such.
Your client companies have no risk manager: you are the one keeping their register, mandate after mandate. Today, one RiskBoard workspace corresponds to one organisation. The cross-company view does not exist yet — tell us what you would need.
Based on the size of your company. Annual subscription, all included: register, risk map, OHS module, unlimited reports.
Send us your current Excel register. We migrate it with you, set the risk appetite and the period, and produce the pack for your next board meeting. Direct access to the founder. Deducted from the first year if you continue.
Open the demo on a sample register, or request a 15-minute call.
Would you rather start on your own? Create my workspace →