Medium Live Sito Ovest 14
Orange alert for flood risk
Why: the site is in the alert zone. Priority 3 of 5.
- Past
- Now (active)
- Soon (active)
Source: civil-protection criticality bulletin (CC BY 4.0), acquired on 23/10/2026.
Site-by-site risk management that follows ISO 31000
RAISE is a platform for managing the risk of strategic infrastructure, site by site. It follows the ISO 31000:2018 process: an asset register, documents read and confirmed by an operator, a risk index with its explanation, approval by a second operator and the treatment plan. It assesses risk with techniques described in IEC 31010:2019. Live alerts name the exposed sites, with their priority and time horizon.
An asset record: the risk index with its range, the explanation, the most significant factors and the history. On the smartphone, a report from the site.
The map shows the sites in the user's scope, each with the shape and letter of its risk level; a ring marks an active alert and flashes until an operator acknowledges it.
Map data © OpenStreetMap contributors (ODbL); relief from TINITALY 1.1 (Tarquini et al., INGV, doi:10.13127/tinitaly/1.1) and Istat boundaries, processed (CC BY 4.0).
The correlation graph starts from a site and extends one level at a time: for each link it shows the reason and the supporting evidence. Sites outside the user's scope appear without their names.
Alerts, ranked by severity, each with its time horizon: past, now, soon. The operator handling an alert acknowledges it and closes it once it is resolved.
The operations room brings together live alerts, the map, trends, the trend by region and the horizon; this screen shows the daily trends.
The pyramid: for each structure, its assets by risk level, the structures below it and the assets with the highest index.
A site's ISO 31000 process, phase by phase: analysis, assessment, validation and risk management with the treatment plan.
Four risk levels
- Low
- Medium
- High
- Critical
The four levels and their colours are the same in the register, the pyramid and the alerts.
The ISO 31000 process in RAISE
Every phase of the ISO 31000 process, from context to recording, has a corresponding function in RAISE.
Context
The asset register with structure, type, criticality and condition; documents read by RAISE and confirmed field by field.
Assessment
An index from 0 to 100 with its range, its level on the scale and the most significant factors, explained in plain language.
Treatment
The action plan with owner, due date and cost, and the residual risk that follows.
Monitoring
Alerts when the index trends upwards and live alerts from official sources, site by site, each with its time horizon.
Recording
Every action in a chained audit trail that can be verified at any time; printable reports and register export.
Before treatment, a second operator approves the assessment
The process moves from Analysis to Risk assessment, then to Validation, and only then to Risk management. Whoever submits an assessment cannot approve it: the decision rests with a validator, who must be a different operator. Every approval or rejection is recorded with its reason in the audit trail; a rejection returns the asset to the assessment phase.
Analysis
Complete record and validated documents
Risk assessment
The assessment is computed
Validation
Approved by a second operator
Risk management
Treatment plan
Validation example
- Asset
- Sito Ovest 14
- Index
- 58.6 · High
- Submitted by
- a structure manager
- Decision
- Approved by a validator
- Reason
- Assessment consistent with the validated reports.
Live alerts from official sources
RAISE reads public bulletins and warnings (civil-protection alerts, weather warnings in CAP format, cyber-security advisories, the catalogue of exploited vulnerabilities) and links them to the sites concerned. Each alert states the event, why it concerns the site, its priority from 1 to 5, the source with its licence and the date the data was acquired.
- Past
- the warning has expired.
- Now
- the warning is currently in force.
- Soon
- the expected event starts in the coming hours or days.
Live events never change the validated index: they are taken into account in the next assessment, which only an operator can approve.
Operators on site can also send a report from a smartphone: the centre receives it immediately, linked to the site.
Each user sees only their own scope
Structures form a pyramid: the top, intermediate levels and local sites. Each user sees their own structure and the ones below it; assets outside their scope are not shown to them. There are six roles: operator, structure manager, executive, validator, auditor and administrator.
- Head officeoutside your scope
- North area (High)your scope
- Site A (Medium)
- Site B (High)
- South areaoutside your scope
The risk index and its explanation
The index runs from 0 to 100 and comes from a transparent formula applied to factors from the asset, the territory and the threats. A Monte Carlo simulation provides the range between the 10th and the 90th percentile around the central value. The explanation reports the main factors with their exact contribution; a missing value stays neutral and is flagged.
58.6
HighRange 53.4–64.7
- Condition from validated reports+19.2
- Asset age+9.6
- Condition in the register+9.6
Reference standards and the role of artificial intelligence
- Built on ISO 31000:2018RAISE's process follows the standard: context, assessment, treatment, monitoring and recording.
- A CycloneDX SBOM for every releaseThe list of software components of every version, in the standard format.
What artificial intelligence does
- It reads the documents.
- It proposes the fields, which an operator confirms, corrects or rejects.
Where artificial intelligence is not used
- The risk index, calculated with a transparent formula.
- Live alerts, generated by fixed rules.
- Approvals, which are given by a validator.
Frequently asked questions
Does RAISE make decisions on its own?
No. Artificial intelligence reads the documents and proposes the fields, which an operator confirms. The index comes from a transparent formula, and every assessment goes through a validator, who cannot be the operator who submitted it.
Where do live alerts come from?
From official public sources: civil-protection alerts, weather warnings, cyber-security advisories and the catalogue of exploited vulnerabilities. Each alert states the source, the licence and the date RAISE acquired the data.
Does an alert change the risk index?
No. Live events are evidence to consider in the next assessment. The validated index changes only with a new assessment approved by an operator.
What happens to the data extracted from documents?
It remains a proposal until an operator confirms, corrects or rejects it, field by field, with the source page alongside. An unconfirmed field never enters the assessment.
Which languages is RAISE available in?
Italian and English: each user chooses their own. The user manual is also available in both languages.
What does it mean that RAISE follows ISO 31000?
It means the work goes through the same phases as the standard: context, assessment, treatment, monitoring and recording. In RAISE each phase has its function, from the asset register to the audit trail.
Who can access a site's data?
Only the users who have that site in their scope, that is in their own structure or in one below it. For all other users the site is not visible.
How can I request a demo?
Write to commerciale@fidemsrl.it or call +39 045 983044: we will walk you through the whole process in RAISE, from reading the documents to the treatment plan.