Every organization faces different threats, obligations, and priorities. Windward’s Organization Defined Risk (ODR) gives you control to define what matters, apply it across data and behavior, and generate intelligence aligned to your mission.
Risk is not universal. It depends on where you operate, what you protect, and what decisions you need to make. Organization Defined Risk enables teams to define, apply, and evolve risk logic that reflects their real operating environment, without relying on generic thresholds or one-size-fits-all indicators.
Define risk indicators tailored to your objectives, operating areas, and threat models, from regulatory exposure and operational disruption to national security risks.
Combine behavioral, static, and intersectional indicators to evaluate risk as it actually emerges, not merely based on predefined rules.
Apply the same defined risk logic across screening, monitoring, investigations, and reporting – ensuring aligned decisions across commercial, operational, and intelligence teams.
Define local and scenario-specific risk profiles instead of relying solely on global indicators — so attention is focused on risks that truly require action.
Customization allows users to select from predefined settings. Configurability goes further. It gives organizations the ability to define their own risk logic – what to monitor, how to score it, and when to apply it.
With Organization Defined Risk, teams are not choosing from a menu. They are setting the rules themselves, based on their operational reality, intelligence priorities, and risk tolerance, and evolving them as conditions change.
Commercial operators, financial institutions, and service providers can define risk profiles that automatically flag vessels exhibiting sanction-evasion behavior, such as dark activity followed by ship-to-ship engagements in sensitive regions, based on their own exposure thresholds.
Defense and intelligence organizations can define high-risk patterns, such as non-transmitting vessels conducting STS operations in smuggling-prone areas, and prioritize leads based on local threat models and operational relevance.
Trading firms and logistics teams can proactively manage disruption by defining alerts for vessels calling ports in war-risk or instability zones, ensuring early awareness and faster response when supply chains are threatened.
What is Organization Defined Risk (ODR)?
Organization Defined Risk (ODR) is Windward’s framework for defining and applying risk logic based on your organization’s specific objectives, exposure, and operating environment. Instead of relying solely on generic risk thresholds, ODR allows you to set what constitutes risk for your mission and apply it consistently across screening, monitoring, investigations, and reporting.
How is Organization Defined Risk different from present or configurable rules?
Preset rules allow users to select from predefined options. Organization Defined Risk goes further by enabling organizations to define their own risk logic, including which indicators matter, how they combine, and when they apply. This gives teams true control to reflect local conditions, mission priorities, and evolving threat models rather than relying on one-size-fits-all definitions.
How does Organization Defined Risk work with Windward’s built-in risk indicators?
Organization Defined Risk does not replace Windward’s regulatory, compliance, or domain-based risk indicators. Instead, it operates alongside them. Windward continues to surface objective risk signals based on regulations and maritime expertise, while ODR allows your organization to layer its own logic on top, so decisions can be made with full transparency across both perspectives.
Can Organization Defined Risk lower or override Windward’s risk assessment?
No. Windward’s baseline risk indicators remain unchanged. However, Organization Defined Risk enables your organization to define additional risk or de-risking logic that is displayed clearly within the platform. This allows decision-makers to weigh Windward’s assessment together with organization-specific priorities when making go/no-go decisions.
How does Organization Defined Risk help reduce false positives?
By tailoring risk logic to your actual exposure and operating context, Organization Defined Risk helps teams focus on what truly matters. Instead of reacting to global or generic indicators, organizations can define local thresholds, relevant behaviors, and scenario-specific conditions, reducing noise and preventing unnecessary escalations.
Can defined risk profiles change by region, scenario, or mission?
Yes. Organization Defined Risk supports local and scenario-specific risk definitions. Teams can define different risk profiles for regions, trade lanes, asset types, or mission contexts, ensuring attention is directed only to risks that require action in that specific environment.
Does Organization Defined Risk apply across the entire organization?
Yes. Once a risk definition is created, it is applied consistently across your organization. This ensures aligned decisions across teams and workflows, from screening and monitoring to investigations and reporting, while eliminating fragmented or contradictory risk assessments.
Can Organization Defined Risk be updated as conditions or regulations change?
Absolutely. Risk is not static, and Organization Defined Risk is designed to evolve. Organizations can update their defined risk logic as threat patterns, regulations, or operational priorities change, without needing to rebuild workflows or rely on fixed rule sets.
Which teams typically use Organization Defined Risk?
Organization Defined Risk is used across commercial, compliance, operational, and intelligence teams. This includes trading and logistics teams managing disruption risk, compliance teams managing sanctions exposure, and government or defense teams prioritizing operational threats based on local mission relevance.
How does Organization Defined Risk improve consistency in decision-making?
By applying the same defined risk logic across all workflows, Organization Defined Risk ensures that teams assess risk using a shared framework. This eliminates ad hoc judgment calls, reduces internal friction, and enables faster, more defensible decisions, especially in high-volume or high-pressure environments.