Your platform for risk, security, privacy and compliance management
Diri by Cyrigo is a Norwegian-developed web platform that helps organisations manage digital and operational risk, information security, privacy and compliance in a structured and collaborative way. Whether you are working towards ISO 27001, NIS2, GDPR or other requirements, Diri gives you one place to document the work and stay audit-ready.
Diri brings your risk, security, privacy and compliance work together in one workspace. It lets you:
The left-hand menu is grouped by area. Which groups you see depends on the modules your organisation has and the roles you hold.
| Menu group | What you find there |
|---|---|
| My Workspace | Your personal starting page: your tasks, treatments, controls and items. See My Workspace. |
| Dashboard, Tasks, Treatments | The dashboard for the active module, and the task and treatment registers. |
| Frameworks | The framework library, activated frameworks, controls and evidence. |
| Vendors, Systems & Processes | Vendors, Customers, IT Systems, Business Processes, Dependencies and Assessments (pre-assessments). |
| Operational risk and Cyber security | Risk Assessment, Risk Registry, the asset registry (Business Assets or Information assets), Threats, Vulnerabilities and Templates. |
| Privacy | Processing Activity, Pre DPIA, DPIA, Privacy Risk Registry, Threats, Vulnerabilities and Templates. |
| Governance & Compliance | Annual Wheel, Policies, Incidents, Incident Registry, Reports, Archive and Files. |
| Administration | Users & Access, Settings and Latest Events (for administrators). |
Register your vendors, customers, IT systems and business processes, and connect them to information assets. The dependency analysis shows which systems and suppliers your operations depend on most, and what is affected if a system becomes unavailable or compromised.
Scored pre-assessments of vendors, IT systems, business processes (BIA), customer relationships and AI systems help you decide where a full risk assessment is needed, and recommend treatments.
Assess risk with the bowtie method in a guided process, using your own risk matrix, threats, vulnerabilities and assets. Assessments can be sent for signing, which records the risk owner and sets the review period. The risk registry and risk acceptance register give an overview of risks and the decisions taken on them.
Keep your records of processing activities, Pre-DPIAs and DPIAs in one place, with data flows between systems and support for organisations acting as data processors.
Activate frameworks such as ISO 27001, NIS2 and GDPR, assign control owners, record maturity and evidence, and reuse evidence between frameworks that cover the same requirement. Generate an Audit Evidence Report / Statement of Applicability for your auditor.
Assign and track treatments and tasks, manage policies, register incidents, and see recurring governance activities over the year in the annual wheel.
Use preconfigured dashboards and report templates, or design your own. Export tables to CSV and assessments to PDF.
Build your organisation as a tree of sub-organisations, assign roles per organisation, share records with colleagues, and let sub-organisations inherit settings, registers and controls from the level above.
Regular users can start with My Workspace and setting up your own account.
For more, visit: https://www.diri.ai/en/product