Templates, checklists and calculators for risk, incident, WHS and compliance work. Built for small teams, and they run on software you probably already have. No sign-up needed.
The review is a 20-minute call: you tell me what you run now, and I tell you the two or three things I would fix first. No obligation.
Nothing to download or install. Your answers stay on your device.
WEB TOOL · ABOUT 5 MINUTES
Twenty questions across governance, risk, incidents, policies and records. You get a score, a breakdown by area, and the gaps worth fixing first, with a printable summary.
Who it is for: aged care and disability providers, not-for-profits and small businesses that want to know where their compliance gaps are before an audit finds them.
WEB TOOL · 1 MINUTE
Pick a likelihood and a consequence and see the rating on a 5×5 matrix, with and without your controls. It suggests a response and a review cycle, and you can copy or print the result.
Who it is for: managers, WHS officers and board members rating a risk for the first time, or wanting one consistent way to score every risk.
Both work in Microsoft Excel, Excel for the web (free with a Microsoft account), Google Sheets and LibreOffice. You do not need a Microsoft 365 subscription.
EXCEL · GOOGLE SHEETS · LIBREOFFICE
A ready-to-use register for up to 100 risks. Rate each risk before and after controls, and the sheet works out the rating, the next review date and a dashboard of what needs attention. Includes a worked example, a scoring guide and dropdowns that keep entries consistent.
Who it is for: small not-for-profits, aged care and community service providers, and small businesses that need a working register without buying software.
EXCEL · GOOGLE SHEETS · LIBREOFFICE
One list of every return, renewal, drill, review and audit, with the next due date worked out for you. Status turns red when something slips, and a dashboard shows what falls due over the next 12 months, by category.
Who it is for: operations and compliance leads at small organisations who are tracking due dates in an inbox, a diary or on a whiteboard.
Step-by-step notes from the Insights library.
RISK & COMPLIANCE
Outgrown the spreadsheet? The column design, rating calculation and views for a shared register people actually use.
Read the guide →INCIDENT, HAZARD & WHS
How to make elapsed time the system's problem, not a person's, with Power Automate.
Read the guide →AUTOMATION & AI
The government's six essential practices, translated for a team with no AI specialists.
Read the guide →Yes. Everything on this page is free with no sign-up. The Excel templates work in Microsoft Excel, Excel for the web (free with a Microsoft account), Google Sheets and LibreOffice, so you do not need a Microsoft 365 subscription. The two web tools run in your browser.
Yes. The yellow cells are yours to edit, including the category lists, scoring wording and review periods on the Scoring Guide tab. The formulas and the Zypher notices are protected so they stay intact. The templates are free to use inside your own organisation, but please do not resell or redistribute them.
Inherent risk is how serious a risk is before any controls. Residual risk is how serious it is after the controls you actually have in place. Rating both shows whether your controls are doing real work, and the residual rating is what should drive how often you review the risk.
Each risk is scored 1 to 5 for likelihood and 1 to 5 for consequence, and the two are multiplied. A score of 1 to 3 is Low, 4 to 8 Medium, 9 to 14 High and 15 to 25 Extreme. The register then suggests a review every 365, 180, 90 or 30 days depending on the residual rating. You can change the review periods to match your own policy.
No. It is an indicative check based only on your own answers to twenty questions across governance, risk, incidents and work health and safety, policies and obligations, and records. It shows where gaps are likely, so you can fix them before an auditor finds them. It does not confirm compliance with any standard or law.
No. The assessment and the Risk Matrix Calculator run entirely in your browser. Nothing is stored or sent unless you choose to submit the optional email form afterwards, and even then only your email address, organisation type and the score summary you see are included.
No template can do that on its own. They are general-purpose tools for organising your risks and due dates. The obligations that apply to you come from your regulator, funder, insurer, contracts and legislation, so confirm each one at the source.
Move when more than one person needs to update the register at the same time, when you need a record of who changed what, or when you want automatic email reminders to owners. A spreadsheet starts to drift once two people use it. If you already pay for Microsoft 365, SharePoint and Power Automate are included in many plans, so the main cost is the build.
A 20-minute call where you tell me what you run now, such as spreadsheets, paper or Microsoft 365, and I tell you the two or three things I would fix first. There is no obligation. It is open to small businesses and not-for-profits anywhere in Australia.
Yes. I build risk registers, incident and hazard reporting, obligations calendars and approval workflows inside SharePoint, Power Automate and Microsoft Forms, so they run on the licences you already hold. See the Services page for what is involved.
The templates and tools are free to use inside your own organisation. The Zypher name and notices are part of each one and are protected in the Excel files so they stay in place. Please do not resell or redistribute them; send people to this page instead. If there is a tool you wish existed, tell me and I will consider building it.
Spreadsheets are a good start. When more than one person needs the register or calendar, I can build it in SharePoint with automated reminders.
Book a free 20-minute review