> For the complete documentation index, see [llms.txt](https://docs.ruler.nl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ruler.nl/risks.md).

# Risks

Two ways to track compliance in Ruler, and when to use each.

The Legal Framework tells you which regulation applies. To document the extent to which your organisation actually complies, Ruler offers two levels of analysis.

| Level                   | Where                                                                                        | What it gives you                                                                                                                                                                    |
| ----------------------- | -------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **High-level analysis** | [Design and effectiveness](/legal-framework/assessing-design-and-effectiveness.md) per topic | An initial indication of whether sufficient policies and procedures are in place for each standard                                                                                   |
| **Risk assessments**    | [Risk assessments](/risks/risk-assessments.md)                                               | A thorough analysis of the compliance risks the organisation is exposed to, each linked to the standard and to the control measures that mitigate it, with gross and net risk scores |

The **Risks** menu item holds the second level. It has two pages:

* [Risk heatmap](/risks/risk-heatmap.md): all risks your organisation has added, plotted by probability and impact.
* [Risk assessments](/risks/risk-assessments.md): the risk assessments themselves, and where you create new ones.

You only see risks visible to the department you are working in.