Pelican: Integrated Risk Management Platform | Vose Software
Home › Pelican IRM
Pelican IRM · integrated risk management

Integrated risk management: one view of risk for leadership

Pelican IRM gives leadership one clear view of risk, in numbers, across the whole organisation. It shows the risk of failure for each strategic goal, total exposure against risk appetite, and where risk builds up. It builds on the Pelican risk register and brings in results from ModelRisk and Tamara.

Last updated October 2026

Strategic goals: the risk of failure for each of the year’s objectives, for the fictional Bradford Industries.

Why it has to be quantitative

Why integrated risk management needs numbers

In most organisations, each department manages its own risks and measures them in its own way. A few use probability distributions. Most use risk matrices, often of different sizes and scales, so the results cannot be compared. Leadership is left without a clear view of the risks the organisation faces.

Enterprise risk management standards such as COSO and ISO 31000 say a risk management system should be:

  • Structured and comprehensive
  • Uses the best available information
  • Seeks continual improvement
  • Focuses on decision-making
  • Improves operational effectiveness and efficiency
  • Integrated across functional roles
  • Creates value for the organisation
  • Improves organisational resilience

Each of these needs risk measured the same way, in numbers, in every role. With numbers, you can:

Add risks up

Add up risk by entity, region, product or type of impact.

See where risk is concentrated

Compare the total risk of each part of the business.

Compare decision options

Compare the risks of different options before choosing one.

Balance risk against reward

Weigh what a plan could gain against what it could lose.

Price your protection

Compare what risk treatments cost with the protection they add.

Track change

Follow how risk, and how well it is managed, change over time.

Pelican IRM works in numbers throughout, yet its built-in tools keep the maths your managers need to a minimum.

How it fits together

One picture from the register, the models and the projects

Pelican IRM takes the numbers from the risk register, ModelRisk and Tamara, so leadership sees total exposure against its risk appetite.

Pelican risk register

Risks, controls, owners and treatments across the organisation, each with a number. About the register

ModelRisk

Excel risk models, run online and updated on their own. About ModelRisk

Tamara

Each project’s likely cost and finish date. About Tamara

Pelican IRM

The view for leadership, on one consistent scale:

  • The risk of failure for each strategic objective
  • Total exposure against the risk appetite of each entity
  • Where risk is concentrated, by entity, region or product
  • Key performance and risk indicators, and dashboards

The boardroom’s BI tools

Pelican IRM links to the reporting (BI) tools leadership already uses.

Pelican IRM needs the Pelican risk register, so you get everything in the register too: bowties, tests of what each control is worth, FAIR-style cyber analysis, the audit trail and more. See every risk register feature

Use cases

Who uses Pelican IRM, and for what

Each member of the leadership team sees the risks to the part of the business they are responsible for, on the same scale as everyone else.

Chief Executive Officer

Gillian

Gillian uses Pelican dashboards to check that the business is working on the risks that most threaten its goals.

Chief Financial Officer

Tom

Tom uses Pelican to keep financial risk within limits and to hold enough capital in reserve.

Chief Operations Officer

Tina

Dashboards show Tina if the business will meet its targets for output, uptime, emissions and other measures.

Chief Information Security Officer

David

David uses a FAIR-style analysis in Pelican so that resources go where they manage cyber risk best.

Chief Investment Officer

Dan

Dan finds the mix of investments that makes the most profit within the agreed risk limits.

Chief Audit Officer

Jane

Jane has her audit team check the risk reduction measures the company depends on most.

Chief Risk Officer

Matt

Pelican helps Matt use one way to measure and report risk across the whole business.

Human Resources Director

Mary

Mary uses Pelican to keep the business’s good safety record by steering clear of dangerous work.

Project Portfolio Director

Victor

Pelican helps Victor make sure the projects that matter most are delivered on time and on budget.

What leadership sees

Every entity on one scale

For each part of the business: its risk, how much its controls already cut it and how much more they could, with a gauge for each type of impact.

Entity performance overview, with managed against potential impact for each impact type.
  • Impacts in money, safety, environment, reputation, strategy or any other key metric.
  • A risk appetite for each entity, project or the whole organisation.
  • Exposure added up by Monte Carlo simulation, compared with risk tolerance.
  • Risk profiles compared across entities, projects and regions.
  • Key performance and risk indicators of any design, tracked over time.
  • Reports on top risks, their trend and the progress of critical tasks.
Financial exposure for each entity, compared with its risk tolerance.
Create your own dashboards with drag and drop.
Schedule exposure: the range of likely finish dates for each project in the portfolio.

Why Pelican

The Pelican advantage

What changes when the whole business manages risk in one system, in numbers.

Focus on what matters most

Pelican lets a business focus on the risks that really matter, and give each risk task to a named person.

Collaboration in managing risks

Anyone in the company can contribute to risk management and show the level of risk the business faces.

Consistent risk estimates

Risks are measured one way across the business, while each unit or project can still see its risks on its own scale.

An auditable history

Pelican stores all information, current and past, as an audit trail of how risks were evaluated and managed.

A complete understanding of risks

Every manager, from the CEO down, knows the risks and opportunities that can affect the part of the business they run.

Consistent evaluation of risks

One method across the business, so risks add up from each site or project to the whole group.

Coordinated management of risks

Controls work together to protect and grow the value of the whole business, not just one part of it.

Shared responsibility for risk

Spotting, judging, managing and reporting risks is a job everyone shares, as part of the culture.

Pelican clients include

ØrstedMerckAccessEdisonVerizonAir LiquideUOBFidelityDe Grey MiningEricssonThe World BankVirgin

Pricing

What does Pelican IRM cost?

These are guide prices, based on the number of Pelican users we usually see at each company size. The real cost depends on the number of users, the installation and any custom set-up. Training and consulting are priced separately.

Company sizeOne-off set-upLicence a yearWeeks to go live
Under 5,000 employees€10k–20k€30k–80k3–5
5,000 to 20,000 employees€15k–30k€60k–180k4–8
20,000 to 100,000 employees€20k–40k€90k–240k6–12
Over 100,000 employees€30k–50k€120k–360k9–15

Organisations where more staff do manual work, or that face fewer regulations or lower risk, have fewer Pelican users for their size, and the other way round.

FAQ

Questions about Pelican IRM

What is integrated risk management?

Integrated risk management looks at the risks of the whole organisation together, in one consistent way, instead of each department managing its own risks on its own scale. With quantified risks, leadership can add them up, compare the total with its risk appetite and decide where to act.

How is Pelican IRM different from the Pelican risk register?

The risk register is where risks, controls, owners and treatments are recorded and quantified. Pelican IRM builds on it with the view for leadership: strategic objectives, total exposure against risk appetite and key indicators, with the results from ModelRisk and Tamara brought in. Pelican IRM needs the risk register.

Do our managers need to know statistics?

No. Pelican IRM’s built-in tools keep the maths your managers need to a minimum.

Which standards does Pelican support?

Pelican supports compliance with ISO 31000, the COSO ERM framework, BS 31100, the OCEG Red Book and FERMA.

Does Pelican IRM work with our BI tools?

Yes. Pelican IRM can run spreadsheet models online and update them on their own, build dashboards, and link to the BI tools your boardroom already uses.

Does Pelican run in the cloud or on our own servers?

Either. Use Pelican as a cloud service in any modern browser, or install it on your own network with Windows Server, IIS and Microsoft SQL Server. The security page has the details.

How much does Pelican IRM cost?

Indicative prices run from €10k–20k for set-up and €30k–80k a year for companies under 5,000 employees, to €30k–50k for set-up and €120k–360k a year above 100,000 employees. The risk register is priced separately.

See Pelican IRM on your kind of risks

Pelican is set up for each organisation, so it starts with a presentation and a demonstration on your kind of risks.