The web-based Citicus One suite is used to collate risk data from all types of corporate information systems and business applications before quantifying the extent of risk. It will then prioritize recommended actions to drive down risk to an acceptable level.

Version 1.3 of the system offers support for Windows XP, better support for authentication processes and also comes with various risk management best-practice guidelines.

The programs makes wide use of risk charts, web-based scorecards and incident reports, and other graphical representations of information risk to help organizations analyze and understand information risk and its potential cost to business.

Charts can be configured to show the factors that influence risk, and changes in the risk profile of information resources over time. The software was developed with the input from 15 companies including Motorola, Standard Bank of South Africa, and ST Microelectronics.