Skip to content
Docs

Signing in

You sign in to Risk Core at your company’s own address, with your password and a 6-digit code from an authenticator app. One account works in both ERM Core and BCP Core.

Who: everyone with a Risk Core account. Where: your company’s Risk Core address, which your administrator sends with the invitation. Every company reaches the same Risk Core sign-in page through its own domain.

First sign-in

Section titled “First sign-in”
  1. Open the invitation e-mail. Your administrator or HR adds you to the staff register, and Risk Core sends you an invitation by e-mail.
  2. Set your own password. Follow the link in the invitation and choose your password. Nobody else ever sees or sets it.
  3. Enrol an authenticator app. Scan the code shown on screen with an authenticator app on your phone, then enter the 6-digit code the app shows. From now on, every sign-in asks for a fresh code.
  4. Choose Remember this device if this is your own phone or computer. The device then does not ask for a code for the number of days your company sets — see Single sign-on and sign-in policy.
  5. You land on your starting screen. It depends on your roles; see Your roles and where to start.

Every sign-in after that

Section titled “Every sign-in after that”
  1. Go to your company’s Risk Core address.
  2. Enter your e-mail and password.
  3. Enter the 6-digit code from your authenticator app, unless this device is remembered.

During an incident — while a BCP incident is open, Risk Core does not sign you out, so nobody is locked out while the plan is running.

One account, every role

Section titled “One account, every role”
  • One account works in both modules. A person who is both an Entity Risk Manager and a BCP head signs in once and sees both roles.
  • If you hold roles in several companies of your group, switch company from the header after you sign in.

Lost or changed phone

Section titled “Lost or changed phone”

Ask your administrator to reset your authenticator. At your next sign-in you enrol the authenticator app again (step 3 above). The reset is recorded in the audit log.

Single sign-on

Section titled “Single sign-on”

If your company uses Microsoft or Google single sign-on (SSO), you sign in with your company account instead. How it works: Single sign-on and sign-in policy.

Section titled “Related”