Citicus ONE by Citicus is a web-based risk and compliance management software designed to measure and manage security, risk, and compliance across an enterprise. It assesses and manages risks to information systems, suppliers, sites, and other key assets using a methodology based on over 25 years of research. The software enables organizations to evaluate criticality, assess risk, track remediation, and generate reports. Citicus ONE supports risk management for IT systems, suppliers, outsourcing partners, and physical assets. It uses risk scorecards and criticality assessments to evaluate risks to the enterprise, including application systems, IT infrastructure, key suppliers, and essential sites. The system offers insights and guidance on reducing risk, providing top management with an overview of risk and compliance for critical assets and processes. It measures risk through online forms and assesses criticality to quantify potential business impact from worst-case scenarios, supporting a triage-based risk management approach. Citicus ONE is available in six languages and can be deployed as a server-based application, single-user desktop or laptop implementation, or a hosted 'on-demand' service accessed over the Internet.