Yes. The solution is highly configurable and reflects your organisation's own risk categories, processes, and governance model.