Risk & Continuity

Know your risks, map what you depend on, rehearse the bad day and keep running when internet, payments, power or water go down. One package from Copyl, with agents that propose and people who approve.

Toimii niiden järjestelmien kanssa, jotka sinulla jo on

Copyl ei korvaa järjestelmiä, joita jo käytät. Kunnossapito-, talous-, varasto-, HR- ja anturijärjestelmäsi yhdistetään Copyliin integraatioalustan kautta – hallitusti, käyttöoikeuksia valvoen ja lokitettuna.

Saat sovellukset ja tekoälyagentit nykyisten järjestelmiesi päälle. Nykyisistä järjestelmistäsi tulee agenttien tietolähteitä.

Systems that typically stay: incident and ITSM tools, risk and compliance registers, and monitoring and alerting systems.

The problem now

Organisations are being asked to show that they can withstand serious disruption, and the threats are changing faster than yearly risk reviews.

AI-driven cyber incidents

Automated, AI-assisted attacks can hit many organisations at once and move faster than a team can read a runbook. The risk is no longer one system. It is everything that depends on it.

Long outages of what you rely on

Internet, payments, power and water can fail for days. Most plans assume they come back within hours, and few have been rehearsed.

Cybersäkerhetslagen and NIS2

The Swedish Cybersecurity Act (2025:1506), which implements the EU NIS2 directive, has applied since 15 January 2026. It expects documented risk management, incident handling and business continuity.

Civil defence and preparedness

Municipalities, regions and operators of essential services are building up civil defence and crisis preparedness. That work needs one shared picture of risks, dependencies, exercises and actions.

From risk to readiness

Assess

Adopt risks from the library and risk batteries

Map

See what your processes and services depend on

Rehearse

Run scenarios and exercises and record findings

Respond

Use the crisis binder and the incident register

Improve

Turn findings into actions and monitor compliance

Sääntely- ja markkinakonteksti

Euroopan unioni

NIS2 and, for financial entities, DORA expect documented risk management, incident handling and tested continuity. Risk & Continuity keeps risks, dependencies, exercises and incidents together as evidence.

Risk and continuity A shared picture of risks, dependencies and rehearsals

Start from a library of 300+ risks

Agent Hub
Problem
A blank risk register is slow to fill and easy to leave incomplete.
Agent action
Adopt risks from the library of 300+ risks in Swedish and English across 18 categories, or whole risk batteries, with suggested controls. An agent proposes which fit your organisation.
Outcome
A register that starts complete, where a person approves each risk and owner.

Map dependencies and run scenarios

Operations
Problem
Plans list systems, but not what breaks when internet, payments, power or water stop.
Agent action
Map which processes and services depend on what, then play scenarios and exercises against the map. Findings become actions with owners.
Outcome
You see the weak links before the incident does.

Cyber and AI-incident readiness Be ready for the incident that is hard to predict

Risk batteries for AI and cyber incidents

Agent Hub
Problem
AI systems and AI-driven attacks add risks most registers do not cover yet.
Agent action
Adopt the AI Operations battery, with 25 AI risks and suggested controls, and the Cyber & AI-incident battery as a ready starting point.
Outcome
AI and cyber risks are owned, controlled and followed up like any other risk.

Crisis binder and incident register

Operations
Problem
When systems are down, plans stored in those systems are out of reach.
Agent action
Keep an offline crisis binder with plans, contacts and checklists, and register every incident with its follow-up. An agent drafts the incident summary for a person to approve.
Outcome
People know what to do, and the record of what happened is complete.

What you get

Risk library

300+ risks in Swedish and English across 18 categories, ready to adopt.

Risk batteries

Adoptable risk sets, including AI Operations and Cyber & AI-incident, with suggested controls.

Dependency map

See which processes and services depend on internet, payments, power, water and suppliers.

Scenarios and exercises

Play the bad day, record findings and turn them into actions.

Offline crisis binder

Plans, contacts and checklists you can reach when your systems cannot be reached.

Processes

Map the processes that the risks, scenarios and exercises are about, in Operation Hub.

Incident register

Register incidents, follow them to closure and keep the evidence.

Compliance monitoring

Follow how you meet the requirements that apply to you, and see what is missing.

Agents propose, people approve

Risk agents draft and suggest in Agent Hub. Anything consequential waits for an authorised person, with the evidence attached.

For whom

The same package, used differently depending on what you are responsible for.

Business continuity

Companies

Keep a living risk register, know your critical processes and be able to show a board or an auditor how you would handle a serious incident.

  • Adopt risks and controls from the library
  • Rehearse the loss of a critical supplier or system
  • Report risks and incidents to the board

Civil defence and crisis preparedness

Municipalities and regions

Plan for crises and civil defence with risks, dependencies, exercises and actions in one place, together with Crisis Preparedness and Civil Defence.

  • Map critical functions and their dependencies
  • Run exercises and follow up findings
  • Coordinate actions across departments

Essential services

Utilities

For operators of power, water, heat and other essential services that others depend on, and that must show continuity under cybersäkerhetslagen.

  • Model dependencies between services and suppliers
  • Rehearse long outages and cyber incidents
  • Keep an incident register with follow-up

DORA

Fintech and financial entities

Support the risk management, incident handling and resilience testing that DORA expects, with evidence kept together.

  • Document ICT risks and controls
  • Register and follow up incidents
  • Run and record resilience exercises

Prices

One package with the risk library, risk batteries, Crisis Preparedness, Civil Defence, Preparedness Intelligence and Operation Hub.

Starter

SEK 2,900 per month

For a smaller organisation getting started with risk and continuity.

Standard

SEK 7,900 per month

For organisations with several teams, processes and dependencies to cover.

Public / Enterprise

SEK 14,500 per month

For municipalities, regions, utilities and larger enterprises. Risk agents are included.

Group

From SEK 25,000 per month

For groups with several entities. Priced by quote.

The risk agents add-on is SEK 1,500 per month on Starter and Standard, and is included in Public / Enterprise.

Prices are in SEK per month excluding VAT, billed yearly.

Aloita

Noudattaminen ja hallinta

Tutustu siihen, miten Copyl tukee yrityshallintaa ja sääntelyvalmiutta AI-aloitteissanne.

Ajakaa sitä Copyl Cloudissa, suvereenina käyttöönottona eurooppalaisomisteisessa infrastruktuurissa tai täysin on-prem oman perimeterinne sisällä.

See how Risk & Continuity fits your organisation, with a walk-through of the risk library, dependency map and exercises.

Book a demo →

Questions we hear

What is in the package?

Risk Management with the risk library and risk batteries, Crisis Preparedness, Civil Defence, Preparedness Intelligence and Operation Hub for processes, together with an incident register and compliance monitoring.

Do the agents act on their own?

No. Agents propose and draft in Agent Hub. A person with the right authority approves anything consequential, and the evidence follows the proposal.

Is our data kept apart from other customers?

Yes. Your data stays in your tenant, and access follows your roles and information levels.

Can we adapt it to our organisation?

Yes. Adopt the risks that fit, add your own and shape processes, scenarios and exercises around how you work. Talk to us about group set-ups and special requirements.

Tutustu muihin toimialoihin

Näytä kaikki toimialat