AgendisRISK - Plans & Pricing
Your governance process should be structured, auditable, and always current. AgendisRISK makes that happen inside the Microsoft 365 environment you already own.
Most risk platforms add cost on top of your Microsoft investment. They sit outside your environment, outside your control, and ask your team to learn yet another system. AgendisRISK runs inside your own Microsoft 365 tenancy. Your data never leaves. Your team never logs into something new. For Australian organisations managing Essential Eight obligations, ICT governance, or multi-framework compliance, that is a meaningful difference.
Before you compare tiers, here is what you get regardless of which plan you choose.
Platform Setup
Configured inside your own Microsoft 365 tenancy. Your data stays sovereign in your own environment.
Risk Framework Configuration
Your risk registers built using your actual data and categories. Not a generic template.
Risk Log Migration
Existing risk data moved from spreadsheets or documents directly into the platform.
Onboarding Session
A structured walkthrough so your responsible officer is confident from day one.
Automated Board-Ready Reporting
Reports generated automatically from live data. Always current. No manual compilation.
Microsoft 365 Native
Runs inside Teams and SharePoint. No new logins. No separate system to manage.
Every plan includes setup, migration, and onboarding. You are not buying a licence and working out the rest yourself. Start where you are. The platform grows with you. Most organisations begin with Pro.
Your risk data is in more places than it should be. Essentials gets your organisation into a structured, auditable governance platform without overcomplicating it.
Platform configured, data migrated, team onboarded, reporting automated. Four quarterly check-ins keep your responsible officer on track throughout the year.
Most organisations know that compliance matters. Fewer have a clear, documented picture of where they actually stand. Pro includes a guided E8, Sustainability or ICT maturity assessments conducted in conjuction with your platform setup.
Remediation priorities visible, tracked, and reportable from day one.
This is where most organisations should start.
ISO 27001. NIST CSF. CPS 234. Your own internal framework. AgendisRISK Enterprise will bring full assessment framework capability to the platform, so any compliance obligation your organisation carries can be managed, tracked, and reported from inside Microsoft 365. Any framework. Any standard. One platform.
In addition to the annual plan fee, an implementation fee applies to every new AgendisRISK engagement. It covers the work of configuring your platform, migrating your risk data, and setting up your reporting environment. The fee depends on the size and complexity of your organisation and is scoped clearly upfront so there are no surprises.
See how organisations are replacing manual risk tracking with a structured, always-current governance platform built inside Microsoft 365.
Risk and compliance processes managed across spreadsheets, shared folders, and email threads. No single source of truth. No real-time visibility. Audit preparation was manual and time-consuming.
AgendisRISK was deployed inside the council's existing Microsoft 365 environment. Strategic and Project Risk registers, RAID logs, compliance assessments, and automated Power BI reporting configured and live within weeks.
AgendisRISK is built and delivered by Agendis. The ICT consulting expertise behind it sits with Cohesis, a Perth-based firm with a track record across local government, manufacturing, professional services, and health.
WALGA Preferred Supplier
Cohesis is pre-qualified on the WALGA Preferred Supplier panel. For WA councils, that simplifies procurement and signals the rigorous standards your organisation expects.
Your Report Does Not Stop at the Document
Any Cohesis ICT Health Check, ICT Plan, or E8 Assessment can be loaded directly into AgendisRISK as your baseline risk register. Your onboarding fee is waived. The platform is built around work already done.
More Than a Platform When You Need It
When your organisation needs strategic ICT advisory, vCIO services, or a technology roadmap alongside the platform, that expertise is available through Cohesis without switching providers.
Everything you need to know before making a decision.
Yes. AgendisRISK runs entirely inside your Microsoft 365 environment. Most organisations we work with already hold the licences required. If you are unsure whether your current licence tier is sufficient, we can confirm that as part of the initial conversation.
Because AgendisRISK sits inside your own tenancy, your data never leaves your environment in the first place. If you end your subscription, everything remains exactly where it has always been. You are not locked into a vendor-hosted system with an export problem at the end of the relationship.
Yes. Most organisations start at Essentials and move to Governance when they are ready to address their Essential Eight obligations. Upgrading is straightforward because the platform is already configured and your data is already in place. You are building on what exists, not starting again.
Most GRC platforms sit outside your Microsoft environment and add licensing costs on top of what you already pay. AgendisRISK is built natively on Microsoft Power Platform and runs inside your own Microsoft 365 tenancy. No separate infrastructure to manage, no data sovereignty exposure from third-party hosting, and no new system for your team to learn from scratch.
A structured walkthrough with your responsible officer covering risk register navigation, reporting, and preparation for your first quarterly check-in. Your team should be using the platform independently from day one, not still finding their feet at the end of the first quarter.
Yes. The platform automates the processes that typically require dedicated staff — reminders, reporting, compliance calendar tracking. A small council or business without a dedicated risk officer can run a structured, auditable governance process with AgendisRISK and a quarterly check-in, without someone managing it daily.
The Essential Eight is a cybersecurity mitigation framework developed by the Australian Signals Directorate. For Australian government organisations it is increasingly an expectation rather than a recommendation. For private sector organisations, insurers and larger clients are beginning to ask the same questions. The Governance plan includes a guided assessment giving you a clear, documented position and a structured plan for closing the gaps.
Each check-in is a structured 90-minute working session with your responsible officer. We review the risk register, confirm actions are being tracked, flag anything needing escalation, and update the platform. By the end of each session your risk register is current and your board reporting reflects the latest position.
Yes. If your organisation has completed a Health Check, Essential Eight Assessment, or ICT Plan with Cohesis, those outputs can be loaded directly into AgendisRISK as your baseline risk register. Any assessment that produces risk ratings or actions can be translated into the platform.
We walk you through AgendisRISK using your context, your risk categories, and your questions. No generic demo. No slides. Just your platform.
