PEAKDEFENCEWINGMAN · Use cases

Risk identification

Find new risks without duplicates, link them to everything relevant, and let signals start identification or a re-review.

Typical requirementsISO 27001 6.1.2ISO 31000NIS2 Art. 21

Screens for this stage · Stage 3: Link

A risk and everything linked to it
Risks A risk and everything linked to it Related tasks, the incident that realised the risk, the control that reduces it, the parent risk, and the risk position with the appetite line.
The graph of one record
Graph The graph of one record Every record has a Graph tab: the risk in the centre, its review tasks, the incident that realised it and the control that reduces it. Depth 1 to 3, or open the full graph.

Screens for this stage · Stage 4: Signals

Reporting a signal
Signals · step 1 Reporting a signal Title, what was observed (hosts, times, names), and an owner. Anyone in the organisation can report.
The new signal, under review
Signals · step 2 The new signal, under review The card appears in Needs review while WINGMAN classifies it. The owner receives an email at the same moment.
The signals inbox
Signals The signals inbox Human-reported observations arrive as cards. WINGMAN classifies each one with a confidence score and proposes a risk or an incident; the owner accepts or rejects.
The email the owner receives
Email notification The email the owner receives A signal routed to you: the record id and title, and what to do: open it beside the AI classification, then accept a suggestion or mark it a false positive.

Sector angles

What this use case looks like under specific regulations.

Financial sector

Interview-based risk identification per process, feeding the operational risk hierarchy instead of a one-off workshop.

CRA

Product teams identify risks for each product, which the CRA requires to be documented and updated.

Videos

WINGMAN AI GRC – risk management use case Regular risk reviews and new risk identification, plus incidents, signals and vulnerability changes between reviews.
ISMS implementation with WINGMAN AI Building an information security management system in WINGMAN, from requirements and scope to risks, controls, owners and the review cycle.

Plays from youtube-nocookie.com. YouTube sets no cookies until you press play.

Other use cases

Vulnerability impact

Assess each vulnerability by the risk it raises, and fix first what matters most.

Risk review and treatment

Review risks with all the context gathered since last time, plan their treatment, and keep several levels of risk consistent.

Business impact analysis

Assess how long each service can be down and what recovery it needs, from the services, risks and controls already recorded.

All use cases

See WINGMAN on your own data

We can walk through any of these use cases with your requirements, risks and controls.

Contact Peak Defence