RiskHeatMap.ai

Risk GPT

Explainable by design

Risk Heat Map Builder

For now, this workspace points to your external GPT. Use the app to manage the governed ecosystem, and use the GPT for analysis with the live context below.

Human approval remains required before controls, risks, and actions are finalised.

Incidents in context

Current incident records you can carry into the GPT conversation.

Pending approvals

Human-in-the-loop review items that still need action inside this app.

Configured connectors

Connected systems and evidence sources represented in the ecosystem snapshot.

Open the GPT

Launch your Risk Heat Map Builder GPT and paste the ecosystem snapshot below as context.

Open Risk Heat Map Builder

Recommended prompt

Review this RiskHeatMap.ai ecosystem snapshot. Explain what is happening, identify the highest-priority risks, call out control gaps and weak signals, and recommend what should be reviewed or updated next.

Ecosystem snapshot

RiskHeatMap.ai ecosystem snapshot

Incidents: 3
Issues: 3
Risks: 5
Pending human approvals: 10
Approved items: 7
Sensitive incidents: 2

Active incidents
- Vendor access review evidence overdue | severity=MEDIUM | system=Third-party Assurance | status=OPEN
- Customer data export after Snowflake role misconfiguration | severity=CRITICAL | system=Snowflake Analytics | status=MONITORING
- Payment outage due to API misconfiguration | severity=HIGH | system=Payments API | status=OPEN

Breaches
- Suspected unauthorised customer data export | severity=CRITICAL | status=CONTAINED | detection=Snowflake Audit Telemetry
- Potential sensitive payment operations breach | severity=CRITICAL | status=INVESTIGATING | detection=Breach Intelligence Agent

Frameworks
- APRA CPS 234 Overlay | scope=Payments and cloud infrastructure
- Internal Payments Resilience Standard | scope=Payments platform

Evidence sources
- SOC walkthrough images | type=IMAGE | status=ACTIVE
- Quarterly access review export | type=FILE | status=ACTIVE
- Snowflake audit extract | type=API | status=ACTIVE

Integrations
- Snowflake Audit Telemetry | provider=SNOWFLAKE | status=CONNECTED
- Case Management API | provider=REST API | status=CONNECTED

Recent audit activity
- REVIEW_REJECTED | risk | Jul 15, 2026, 10:53 AM
- REVIEW_REJECTED | control | Jul 15, 2026, 10:53 AM
- REVIEW_REJECTED | control | Jul 15, 2026, 10:53 AM
- REVIEW_APPROVED | issue | Jul 15, 2026, 10:53 AM
- REVIEW_APPROVED | issue | Jul 11, 2026, 2:10 AM
- EVIDENCE_OVERDUE | evidence | Jul 11, 2026, 1:30 AM

Use this context to explain current risk posture, review bottlenecks, breach state, framework coverage, and evidence gaps.

What stays in RiskHeatMap.ai

Use the GPT for analysis. Use the app for governed updates and review actions.

Review Queue remains the place to approve, reject, or override controls, risks, issues, and actions.

Breach Dashboard remains the operational view for severity, status, and containment workflow.

Frameworks & Evidence remains the place to register custom frameworks, evidence sources, and integrations.

Trust & Compliance remains the audit and oversight system of record.

Current ecosystem signals

A quick glance at the records you are handing into the GPT.

Vendor access review evidence overdue

MediumOpen

Quarterly access certification evidence for a conveyancing data provider was not supplied before the assurance deadline.

Customer data export after Snowflake role misconfiguration

CriticalMonitoring

Monitoring identified an unusual export from a payment analytics schema after a privileged Snowflake role was assigned outside the approved access workflow.

Payment outage due to API misconfiguration

HighOpen

A production payment release introduced an API configuration mismatch that caused checkout failures for merchants during peak transaction volume.