How it works

From the field to the bridge

Pelypso follows the chain of command you already have. Five roles, one register, and a record of every grade and decision along the way.

1Field Team

Anyone can raise a risk

Staff and vendors file a field report in about a minute: the risk in one sentence, what happens if nobody acts, who would feel it, when it could hit, and a best guess at impact and probability.

A red marker shows where the risk would land on the 5×5 map, next to the risks already there.
Every report gets an answer, so people keep reporting.
Owners send a short weekly report on each risk they own.
Points and badges reward accepted reports and on-time work.

Incoming field reports for a Mission Lead

2Mission Lead

One person grades every report

Each operation has exactly one Mission Lead. They read every field report and decide what happens next.

Choice	What happens
Accept	It joins the register with an owner inside the organization and a graded score.
Merge	It adds to a risk that's already there, and the reporter joins its team.
Ask for detail	It goes back to the reporter with a question.
Deny	The reporter hears why it isn't a risk right now.

Mission Leads also review weekly owner reports, discount or elevate scores, and give orders with due dates.

The score

Impact × probability, on a 5×5 map

Every risk carries a score from 1 to 25. Bands set how loudly it shows up, and anything critical goes to the top of the register.

Band	Score	What it means
Low	1 to 4	Watch it.
Moderate	5 to 9	Plan a response.
High	10 to 14	Act now. A cost estimate is required.
Critical	15 to 25	Top of the register, and often a decision for Central Command.

3Central Command

Decisions, made with precision

CIOs, CISOs, infrastructure and finance leaders see the whole enterprise at once: a situation report, the radar of risk, focus areas and dollars at risk.

Mission Leads escalate the risks that need a decision.
Command decides, and the decision and its orders go in the log.
Cyber reports reach the CISO directly.

Around the chain

Everyone else aboard

AdministratorsInvite people, assign roles, run the access review, set up campaigns and operations, and check the audit log.

Vendors and contractorsReport what they see on the operations their host shares with them. They never see costs, security risks or Command's decisions.

Gertrude, the mail clerkSends invitations, reminders and a short email digest from gertrude@pelypso.com. Each person picks how often, or turns it off.

Seven minutes per role

Each role has its own Pelypso U course, filmed in the real app.

Watch the courses