Provides risk-assessment and compliance software that enables organizations to perform risk-based assessments and measure security and compliance metrics. Includes business/compliance, physical security threat assessment, and incident-management modules for hospitals, schools, energy facilities, and financial institutions.