RESOURCES
Field notes, reports, and the odd rant.
Plain-English writing on quantifying risk. No pillar pages, no "ultimate guides," no gated PDFs of shame.
REPORTS
The numbers behind the work.
REPORT · 24 PAGES
The £ Cost of a Heat Map, 2026
We asked 212 CROs what their top risk cost them. Half couldn't say in pounds. The other half were £2.4m apart.
REPORT · 18 PAGES
BCP in the age of concentration risk
Five cloud regions host 78% of UK critical financial services. What happens if one goes dark?
REPORT · 32 PAGES
Supplier collapse: a field playbook
How three Riskbit customers priced and recovered from a real-world SaaS supplier failure in Q4 2025.
CASE STUDIES
What customers did with Riskbit.
CASE STUDY · HALCYON
Pricing a Christmas outage in 48 minutes
How Halcyon's resilience team built a scenario that justified a £1.4m upgrade programme in a single board session.
CASE STUDY · KERNEL BANK
DORA, demystified — with a £ number
A tier-3 digital bank turned DORA compliance from a 60-page ICT register into a living scenario library.
CASE STUDY · NORTHWIND
Walking into the board with one number
Sarah Amara on how her CRO function stopped defending heat maps and started negotiating budget.
BLOG
Field notes from the team.
ARTICLE · 6 MIN
Why your risk register is lying to you
Probability × Impact looks rigorous. It's actually vibes. Here's why, and what to do instead.
ARTICLE · 8 MIN
The hidden cost of "Contact us" pricing
A working theory on why risk tooling is so expensive: buyer ignorance, and vendor incentive.
ARTICLE · 4 MIN
BCP is cyber. Cyber is BCP. Stop arguing.
The artificial divide between continuity and security costs you real money every year. Here's the maths.
ARTICLE · 12 MIN
How we quantify reputational impact (and stay sane)
The hardest number to pin down. Here's our working approach, and what we'd still love to improve.
ARTICLE · 5 MIN
A board pack in one page
Everything we learned building the Riskbit default board template. Copy it, steal it, make it yours.
ARTICLE · 7 MIN
Changelog · Q1 2026
New: supplier-collapse branching, Slack integration, PDF export v2. Broken: nothing we know about.
Want this in your inbox?
One short email a fortnight. The best reports, the field notes, and nothing else.