WINGMAN
Use cases
Each use case runs on the same records. Open one to step through it on the graph.
Assurance
Risk
Vulnerability impact
Assess each vulnerability by the risk it raises, and fix first what matters most.
Risk review and treatment
Review risks with all the context gathered since last time, plan their treatment, and keep several levels of risk consistent.
Risk identification
Find new risks without duplicates, link them to everything relevant, and let signals start identification or a re-review.
Business impact analysis
Assess how long each service can be down and what recovery it needs, from the services, risks and controls already recorded.
Operations
Incident handling
Support every stage of an incident, from the first signal to the risk review it should trigger.
Supplier evaluation
Evaluate a supplier for feasibility before onboarding, and keep watching it afterwards.
Change management
Assess a planned change for impact, decide the controls needed before and after it, and keep one set of records as the result.
Regular reviews
Run the reviews good practice expects (assets, documents, risks, incidents, access) on a calendar instead of from memory.
Security operations control
Run security work through plans and tasks, with briefs, reminders and escalations, and ask "what needs to be done" against everything the model knows.
Compliance
New requirements
Implement a new regulation or standard by reusing and linking what already exists, then drive the rest with tasks and plans.
Management review
Prepare the ISO 27001 management review and NIS2 management body oversight with complete inputs, logged decisions and planned follow-up.
GDPR and DPIA
Keep processing chains and their risks current, and support data protection impact assessments.
EU AI Act
Keep an AI use case registry and link each use case to its obligations, risks and controls.