Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience real numbers from our own analytics — open to see them
–Visitors
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · counted by iTechGuides's own first-party analytics, bots removed, every figure rounded down · how we count

GOAT Risk review

#36 of 61 in Internal Controls Software

A broad risk and controls toolkit with monthly plans starting at £30.

5.6/10Editor score
GOAT Risk5.6 Visit GOAT Risk

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

GOAT Risk brings risk registers, control assessments, incident reporting, and action tracking into a cloud platform for organisations managing business risks. Its mix of configurable risk templates, scoring, and board committee summaries can suit small teams that need structured reviews without starting with an enterprise-priced plan. It also serves mid-market and enterprise organisations through higher tiers with expanded scale and assurance capabilities.

The published monthly GBP plans start with Starter at £30, which includes core GOAT Risk essentials. Standard is £150 and adds more scale; Standard Plus is £240 and adds more profiles and users. Enterprise costs £450 and includes exports to .xls, .ppt, and .doc, an annual system health check, and multi-admin. Enterprise PRO is £660, adding advanced search, custom scope reporting, an editable risk universe, control library and listing, and editable heat-map. Control assessments, assessment workflows and access controls, and reporting assurance mapping are in Enterprise PRO + Control Assurance at £750 per month; single sign-on is available for an additional fee.

For internal controls work, the product's meaningful distinction is its dedicated control assurance tier: control risk self-assessments and effectiveness assessments support review processes, while owners, deadlines, and email reminders connect findings to actions. It also includes risk escalation and board committee reporting. The platform is cloud-based, with email support, and the listed compliance items include SOC 2, ISO 27001, PCI DSS, two-factor authentication, and SSO/SAML. Teams seeking a low-cost way to organise risk and control reviews may find the lower tiers relevant; organisations requiring control assurance workflows need to budget for the £750 tier. Buyers who depend on evidence collection or automated testing should compare alternatives, since those capabilities are not part of the described feature set.

GOAT Risk pros and cons

  • Where it wins
    • Risk registers, profiles, and configurable assessment scoring
    • Control self-assessments and effectiveness reviews on eligible plans
    • Action owners, deadlines, and workflow email reminders
  • Where it doesn't
    • Control Assurance is reserved for the £750 monthly plan
    • Advanced reporting and library tools start at £660 per month
    • No evidence collection or automated testing feature is specified

GOAT Risk fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.

Last updated · How we research and update