⚠️ Select your experience
The steps to view risk insights depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
Use Risk insights to visualize how your risk posture is changing over time, understand where risk is concentrated, and export charts for reports and stakeholder updates.
Access the Risk insights page
In the left navigation, go to Risk.
Select Risk insights to open the risk dashboard.
If you don't see Risk insights, your organization may not be using Risk Management Pro or you might not have access to the risk module. Contact your Drata admin to confirm your permissions.
Filter and explore the dashboard
At the top of the page, use filters to focus the insights on the risks you care about most:
Category: Show only risks in specific categories (for example, Access Management or Third-party risk).
Owner: Limit charts to risks owned by specific individuals or teams.
Type: Switch between Inherent and Residual scores for the Risk posture, Risk heatmap, Category breakdown, and Risks over time visualizations using the score-type dropdown.
If your account uses multiple risk registers, the dashboard can roll up data across all registers you have access to, or you can filter to a specific register to see insights for that slice only.
Downloading visualizations
You can export charts from Risk insights for executive reports, board decks, and audit packages:
To download a single chart, select the download icon on that visualization.
To download all charts at once, select Download insights to generate a PDF containing the full dashboard snapshot with your current filters applied.
Exports respect any filters you've set (for example, by category, owner, or score type).
Insight cards and charts
Assessment progress
The Assessment progress card shows how many risks in your register have been scored versus how many are still unscored.
Use this to:
Confirm that key risks have been assessed.
Quickly spot when new or imported risks still need scoring before they'll appear in other charts.
Treatment overview
The Treatment overview visualization groups risks by their assigned treatment (for example, Accept, Mitigate, Transfer, or Avoid).
Select a count in the chart to open the All risks view filtered to that treatment, so you can review the underlying records and adjust plans if needed.
Risk Scores
Risk Posture (inherent vs residual)
The Risk posture chart groups risks by score band (for example, low, medium, high, and critical), using the score type you select in the Risk scores dropdown.
Use Inherent to understand your baseline risk before controls and treatments.
Use Residual to see how much risk remains after mitigation and investment, and to communicate how your program is performing over time.
You can:
Hover to see counts for each score band.
Select any colored block to open the All risks tab pre-filtered to risks in that band, then export a CSV from the register if you need a detailed list.
Risks over time
The Risks over time line chart shows how your Residual risk posture changes across a selected time period, again based on the inherent or residual score type you choose.
Use it to:
Track whether total high or critical risk is trending up or down.
Show stakeholders how mitigation work has affected residual risk over the last few weeks or months.
Export a PDF snapshot to include in periodic reports or leadership updates.
Note: Historical data for this chart is available starting from January 3, 2024, so you won't see data earlier than that date.
Risk heatmap
The Risk heatmap shows all scored risks plotted by Likelihood (one axis) and Impact (the other), using either inherent or residual scoring based on your current score-type selection.
Use this view to:
See whether your program is clustered around medium risks, or if you have many high-likelihood / high-impact items.
Confirm whether mitigation work is moving risks toward lower-impact or lower-likelihood quadrants when you switch from inherent to residual.
Select any square in the heatmap to open the All risks tab filtered to risks that share that impact/likelihood combination.
Category breakdown
The Category breakdown chart organizes categories from highest to lowest severity based on the risks they contain, then groups those risks by severity within each category.
You can:
Scan for categories with a concentration of high or critical risks.
Select a category name to open All risks filtered to that category.
Select a colored severity block within a category to open All risks filtered to both that category and severity level.
This makes it easier to answer questions like "Which risk categories represent the most exposure right now?" and "Where should we focus next quarter?"
Instructions for the Classic Experience ⬇️
Risk Managers can have an overview of risk insights. This dashboard enables risk managers to take actions and download visualizations for reports and visualizations.
Note: Risk Management and Risk Assessments are distinct features.
Insights tab overview
On the Risk Management page, select the Insights tab to access the dashboard. The dashboard includes risk visualizations.
Filter data
You can filter all of the visualization and graphs by risk categories, risk owners. You can also filter based on inherent or residual score for the Risk posture, Risks heatmap, and Category breakdown visualizations.
Download graphs
These filters are applied when you download the graph. You can download each risk visualization by selecting the download icon or to download all select the Download all button. The PDF file when downloading all the graphs can be useful for when you want to create a report or present the current risk posture.
Assessment progress
The Assessment progress card shows the number of risks that have been scored and those that are not yet scored.
Treatment overview
The Treatment overview displays all the risks grouped by their assigned treatment.
Select the number to redirect to the All Risks tab, filtered to that treatment, under the Risk Register tab.
Risk posture
Note: You can filter based on the inherent or residual score by selecting the type of score on the drop down menu underneath Risk Scores.
The Risk posture graph groups the risks by scores. Underneath each colored block is the total number of risks.
Select the colored block to be redirected to the All Risks tab, showcasing the associated risks. For example, to view more information about low risks, you can select the green colored block and if you would like, download a filtered view of the CSV file.
Risk heatmap
Note: You can filter based on the inherent or residual score by selecting the type of score on the drop down menu underneath Risk Scores.
The Risk heatmap depicts all risks that have been scored and displays them in a heatmap based on their Likelihood and Impact score. This serves as a basic breakdown of your company's current risk posture.
Selecting the square with the number of risks associated to that combination of impact and likelihood will take you to the Risk Register filtered to those risks.
Category breakdown
Note: You can filter based on the inherent or residual score by selecting the type of score on the drop down menu underneath Risk Scores.
The Category breakdown card breaks out each category with scored risks grouped by severity. It shows the categories with higher severity risks at the top of the list. This is useful to identify which categories represent the most risk in your company.
Select a category label redirects you to the All Risks page filtered by that category, under the Risk Register tab.
Select a color block redirects you to the All Risks page filtered to those risks, under the Risk Register tab.
Risks over time line graph
Note: You can filter based on the inherent or residual score by selecting the type of score on the drop down menu underneath Risk Scores.
The risks over time section allows you to see how your risk posture has changed over a selected period of time. You can select the time period over which you'd like to review your risk scores. You can also download a snapshot of the graph in PDF form to add to presentations and share with other members of your organization.
💡 Of note, we started collecting the data on this graph as of January 3, 2024 so you will not see data prior to January.



