Risk register
Threats and opportunities with pre and post mitigation estimates, WBS-coded cost lines, key assumptions and governance fields. Every edit writes an immutable change log entry.
One register, analysed properly.
CARDO keeps the register, the estimating basis, the simulation and the reporting in one system, so the number in a board pack can be traced back to the risk that produced it.
How a programme moves through it
Capture the register
Threats and opportunities with pre and post mitigation estimates, WBS-coded cost lines and governance fields. Every edit is attributed and timestamped.
Estimate from first principles
Cost lines are built from a managed rate card rather than typed in as lump sums, so an estimate can be interrogated rather than defended on authority.
Simulate
The register runs through Monte Carlo simulation for cost, and against your imported programme for schedule, producing confidence curves and a sensitivity ranking.
Report
Output a board-ready PDF with the curves, the top exposures and written commentary, scoped to the programme or to one part of the breakdown.
What is in the box
Each part is available according to the role a person holds, so a viewer sees the analysis without being able to alter the basis of it.
Cost risk analysis
Runs the register through 20,000 iterations to produce confidence curves, histograms and a sensitivity ranking, with results rolled up through every level of the work breakdown structure.
Schedule risk analysis
Imports a P6 or Microsoft Project programme, runs critical path analysis and schedule simulation, and reports joint confidence on cost and completion together.
WBS explorer
Browse the work breakdown structure with simulated risk cost rolled up to each element, so exposure can be traced from portfolio total down to a single package.
Rates library
A managed rate card behind every cost line, so estimates are built from labour, plant and materials rather than typed in as a lump sum.
Director reports
Generates a PDF report with the curves, the top exposures and written commentary, scoped to the whole programme or a single part of the breakdown.
AI mitigation assessment
Early accessSubmit actions, controls and fallback, and get a structured residual estimate with a confidence rating and gap analysis. A risk manager reviews it and accepts or rejects it; nothing is applied automatically.
Built on the methods your assurance team already expects
The process follows established risk management practice rather than a proprietary method, so output stands up in an assurance review.
ISO 31000
Risk management principles and process
APM
Association for Project Management guidance
National Grid
Hybrid framework for infrastructure programmes
See it against your own programme
Walkthroughs use your register and your breakdown structure rather than a demo dataset.