Risk & Continuity

Map risks and dependencies, rehearse disruptions and plan how to keep operating when power, water, internet or payments fail. AI agents prepare proposals for authorised people to review and approve.

Risk & Continuity

The problem now

Organisations are being asked to show that they can withstand serious disruption, and the threats are changing faster than yearly risk reviews.

AI-driven cyber incidents

Automated, AI-assisted attacks can hit many organisations at once and move faster than a team can read a runbook. The risk is no longer one system. It is everything that depends on it.

Long outages of what you rely on

Internet, payments, power and water can fail for days. Most plans assume they come back within hours, and few have been rehearsed.

Cybersäkerhetslagen and NIS2

The Swedish Cybersecurity Act (2025:1506), which implements the EU NIS2 directive, has applied since 15 January 2026. It expects documented risk management, incident handling and business continuity.

Civil defence and preparedness

Municipalities, regions and operators of essential services are building up civil defence and crisis preparedness. That work needs one shared picture of risks, dependencies, exercises and actions.

From risk to readiness

  1. Assess

    Adopt risks from the library and risk batteries

  2. Map

    See what your processes and services depend on

  3. Rehearse

    Run scenarios and exercises and record findings

  4. Respond

    Use the crisis binder and the incident register

  5. Improve

    Turn findings into actions and monitor compliance

Risk and continuityA shared picture of risks, dependencies and rehearsals

Start from a library of 300+ risks

Start from a library of 300+ risks

Agent Hub
Situation
A blank risk register is slow to fill and easy to leave incomplete.
How Copyl helps
Adopt risks from the library of 300+ risks in Swedish and English across 18 categories, or whole risk batteries, with suggested controls. An agent proposes which fit your organisation.
Value for your team
A register that starts complete, where a person approves each risk and owner.

Map dependencies and run scenarios

Operations
Situation
Plans list systems, but not what breaks when internet, payments, power or water stop.
How Copyl helps
Map which processes and services depend on what, then play scenarios and exercises against the map. Findings become actions with owners.
Value for your team
You see the weak links before the incident does.

Cyber and AI-incident readinessBe ready for the incident that is hard to predict

Risk batteries for AI and cyber incidents

Risk batteries for AI and cyber incidents

Agent Hub
Situation
AI systems and AI-driven attacks add risks most registers do not cover yet.
How Copyl helps
Adopt the AI Operations battery, with 25 AI risks and suggested controls, and the Cyber & AI-incident battery as a ready starting point.
Value for your team
AI and cyber risks are owned, controlled and followed up like any other risk.

Crisis binder and incident register

Operations
Situation
When systems are down, plans stored in those systems are out of reach.
How Copyl helps
Keep an offline crisis binder with plans, contacts and checklists, and register every incident with its follow-up. An agent drafts the incident summary for a person to approve.
Value for your team
People know what to do, and the record of what happened is complete.

What you get

Risk library

300+ risks in Swedish and English across 18 categories, ready to adopt.

Risk batteries

Adoptable risk sets, including AI Operations and Cyber & AI-incident, with suggested controls.

Dependency map

See which processes and services depend on internet, payments, power, water and suppliers.

Scenarios and exercises

Play the bad day, record findings and turn them into actions.

Offline crisis binder

Plans, contacts and checklists you can reach when your systems cannot be reached.

Processes

Map the processes that the risks, scenarios and exercises are about, in Operation Hub.

Incident register

Register incidents, follow them to closure and keep the evidence.

Compliance monitoring

Follow how you meet the requirements that apply to you, and see what is missing.

Agents propose, people approve

Risk agents draft and suggest in Agent Hub. Anything consequential waits for an authorised person, with the evidence attached.

For whom

The same package, used differently depending on what you are responsible for.

Business continuity

Companies

Keep a living risk register, know your critical processes and be able to show a board or an auditor how you would handle a serious incident.

  • Adopt risks and controls from the library
  • Rehearse the loss of a critical supplier or system
  • Report risks and incidents to the board

Civil defence and crisis preparedness

Municipalities and regions

Plan for crises and civil defence with risks, dependencies, exercises and actions in one place, together with Crisis Preparedness and Civil Defence.

  • Map critical functions and their dependencies
  • Run exercises and follow up findings
  • Coordinate actions across departments

Essential services

Utilities

For operators of power, water, heat and other essential services that others depend on, and that must show continuity under cybersäkerhetslagen.

  • Model dependencies between services and suppliers
  • Rehearse long outages and cyber incidents
  • Keep an incident register with follow-up

DORA

Fintech and financial entities

Support the risk management, incident handling and resilience testing that DORA expects, with evidence kept together.

  • Document ICT risks and controls
  • Register and follow up incidents
  • Run and record resilience exercises

Prices

One package with the risk library, risk batteries, Crisis Preparedness, Civil Defence, Preparedness Intelligence and Operation Hub.

Starter

SEK 2,900 per month

For a smaller organisation getting started with risk and continuity.

Standard

SEK 7,900 per month

For organisations with several teams, processes and dependencies to cover.

Public / Enterprise

SEK 14,500 per month

For municipalities, regions, utilities and larger enterprises. Risk agents are included.

Group

From SEK 25,000 per month

For groups with several entities. Priced by quote.

The risk agents add-on is SEK 1,500 per month on Starter and Standard, and is included in Public / Enterprise.

Prices are in SEK per month excluding VAT, billed yearly.

Copyl apps we recommend for Risk & Continuity

A selection of apps from the Copyl Marketplace that fit this industry. Open any of them to see details and pricing.

Compliance & governance

Explore how Copyl supports enterprise governance and regulatory readiness across your AI operations.

Run it in Copyl Cloud, sovereign hosted on European-owned infrastructure, or fully on-prem inside your own perimeter.

See how Risk & Continuity fits your organisation, with a walk-through of the risk library, dependency map and exercises.

Book a demo →

Questions we hear

What is in the package?

Risk Management with the risk library and risk batteries, Crisis Preparedness, Civil Defence, Preparedness Intelligence and Operation Hub for processes, together with an incident register and compliance monitoring.

Do the agents act on their own?

No. Agents propose and draft in Agent Hub. A person with the right authority approves anything consequential, and the evidence follows the proposal.

Is our data kept apart from other customers?

Yes. Your data stays in your tenant, and access follows your roles and information levels.

Can we adapt it to our organisation?

Yes. Adopt the risks that fit, add your own and shape processes, scenarios and exercises around how you work. Talk to us about group set-ups and special requirements.

Works with the systems you already have

Copyl does not replace the systems you already run. Your maintenance, finance, inventory, HR and sensor systems connect to Copyl through its integration platform — governed, permission-checked and logged.

You get the apps and the AI agents on top of what you already have. Your existing systems become data sources for the agents.

Systems that typically stay: incident and ITSM tools, risk and compliance registers, and monitoring and alerting systems.

Explore other industries

View all industries