Automated Control Suggestions Based on Risk Description in the Risk Register

When I create new manual risks in the Risk Register, I currently have to manually look up and assign the appropriate controls.

What I’ve been doing is copying the risk description into an AI tool and asking it to suggest controls based on ISO 27001:2022—then manually selecting and adding them in Secfix.

It would be incredibly helpful if the platform could recognize the risk description and automatically suggest matching controls from a built-in knowledge base.

Even if I still have to review and confirm them, this would speed up the process and reduce friction significantly.