Mapping of sensitive activities and offence-risk assessment
Keep Model 231 risks, protocols and controls up to date
ISO:OK structures offence-risk mapping, prevention protocols, information flows and the control activities of the Supervisory Body.
How ISO:OK supports Model 231
ISO:OK starts from the already loaded catalogue of predicate offences and a matrix that crosses it with company processes: you assess exposure intersection by intersection, even with a guided questionnaire.
Code of ethics, disciplinary system, protocols for risk areas, rules and information flows of the Supervisory Body are already set up, ready to adapt. Reports have their own channel and status, with the documents for the whistleblower and for the person reported.
Training and updates of the model stay traceable over time. If you also work on ISO 37001, you reuse the code of ethics, reports, disciplinary system and information flows.
A structured path for Model 231
Protocols, ownership, training and disciplinary system
Information flows, reports, audits and model updates
From requirements to verifiable evidence
The model becomes a traceable operating system with current activities and evidence instead of a static collection of documents.
One platform, one source of truth
- Guided activities with ownership and deadlines
- Documents, records and evidence in the same environment
- Coverage map to identify gaps before the audit
- Shared information across multiple standards
Designed for companies and consultants
For companies, Supervisory Bodies and consultants adopting or updating an organisational model under Italian Legislative Decree 231/2001.
Frequently asked questions
How does it help me map offences to processes?
With the offences-and-processes matrix: the catalogue comes already populated, you assess exposure for each intersection and can add your own offences and processes.
Can I manage the Supervisory Body?
Yes: composition, appointment and expiry, independence requirements, information flows and the annual supervision plan.
Can I manage whistleblowing reports?
Yes. You configure the channels and follow each report through its status, with the documents already prepared.
Can consultants manage several client companies?
Yes. Consultants can work with several organisations while keeping users, roles, activities and documents separated.
Start managing Model 231 with ISO:OK
Explore a dedicated environment for free, with sample data already loaded. If you prefer, we will guide you with a presentation.