From 595533b41a60893c73d63ecf90a5fd83ca8e3b5e Mon Sep 17 00:00:00 2001 From: BigGeorge99 <168062266+BigGeorge99@users.noreply.github.com> Date: Fri, 23 Jan 2026 15:12:39 +1100 Subject: [PATCH 1/2] Added risk register Added risk register --- .../T32025/Risk Register(1).xlsx | Bin 0 -> 14641 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 EthicsGuidesandDocuments/T32025/Risk Register(1).xlsx diff --git a/EthicsGuidesandDocuments/T32025/Risk Register(1).xlsx b/EthicsGuidesandDocuments/T32025/Risk Register(1).xlsx new file mode 100644 index 0000000000000000000000000000000000000000..d212c2cf50c8f1b97427cbc301c3a55736f12b2f GIT binary patch literal 14641 zcmeHuWqTY+vUN)qGcz-@CCg%FCX1PwnVDs=EVP)J*2 zx}WNEGOIdIMn+_Wti&e}6aW|i0ssII0tRB>s11Pt01Qw702u%QtS(?} zE5V@LH03!CiXJdo$-X4?oJBH#k;Z8y!e_b01f*dstiUGt4VS#DD!HBtTRML#bTc@+ zg>&uUDGp!}F0;=)E)MVsYHCAxbDV9Yp*nH~&dZTyDujv zI+nm%j6pH!aHm7#U@gtYQDj)Ki;6;S^04{?bqVL(bZf2JJHbLvfdsL>4JY|5N4vVk!RH zqnE}?$#gTo1f7e%1P|QLuErqnOE~k1wh$_M`G~E+*G1-#V6S$N;~*$v`F|4eZu5E> zT3+RhJQ^Up+hQpVM?&Esu6HgAN_w(&1g9diOBA*(-Rwbhn!TO9OA!%wrEqGCrYdPH z{3$WGPAoiqDOiOtPN#weiJXTMgvOQPtJWu_x~BI~4m8WJa9S2r*}#@{6gQsgJ)f9= z2+I?~E_pJQf;wQYXS`VMF`-r8aV8U)%sh45*mB>}wz@qb7Ftr2u)q_?#Z9txg z1?holT%?~g>(*PXmgRCd-L;1evb$v9V$d%fzi{otQ2n<^Hfi8)fIk5Mb>IL1{KuPd zv7mRhwlmkWwl@F6e3dF%TBkA~ym6bp13hx|l93S>nxX=mB>X5gt8sc(Y}z1E1`uzv zC@Q@_kCBj^ewC7Ai(g1PcR6c9Uq5tJ*qK9Csf*c#_>LSwqm|EuysH<`K9003qFkn$ zQl*jT5s={;IX2$z#l9+9=N4~g2*j%zJt2QgWs~+*^U80Qyn2h&WKSMd(!UT*T9b0D z+HJ6j&aS_=@f<}m-Xt8MP@iGPgH9fA&_VM;-kJ|(JO%9OR$kFDSUI=96IHToE+Ks= z8#qMdJM`;{A5n>@f4C4Os{07xNsxJA%LA9}4NL~*0Df}(+ z1;QOos2|bnU*JN&hVeiubaPS9zLS)^;gxs;h#xX1A!?PEsewq&<4o2vQp3lj_lfqM zm*?ufDQQ-9DN>0jkD1{b^Iuy8fDsJA^5DoC6gi@n3&E*5e<1*2H-2_%S0-SgI=FHz zO8`AbpCr{;t0uny*c!BewE`gCH+!-5$9o<0?t?yAOmoAY>avKQFx-(l97yxW_EaFW z9f21an76G|u_hA>`fh>G#(z!^+R&k`_J2ojb+@Q_uXkuxL5^?AboR4867UeN{oyWW zWcO)P0b;Ky4&pAR&Q$51Xj&o}e1<2@b6c+pq@CMJqDVu)JYa1ywB7;9#iFJ)XS;QC zItplG_Dp#(@oX*v4EVb5gskqO9C%wm)4(!eO-%+v(ajoa-q!l)$3ps;z|hr=nyQgG zV=zcdd(}o{d#PiKx;ZHU691)(Pw-5i?RZTQkAr3AorXIulL6L z39}yPW;wHObSYEJy;G<#8`#|Ns<628eP@961_Oa{cw2aisQ?mIQUQx#-OMGe_?uRs zP_n8doPi$~`=FYq6>6cxYxWq?3v%#!@V8o(s;-m)NN|&Esq>5?e3ue zPA=j_`MOUZG7E+a=tD05Ff0Eqntz!XppS*$hv@!yAFZ*YW<3lr0q243{*!IC zv2U_NU)?DK+v=CW8LE(ir7ZM|cwC=<#GkQN<|a+#kg!}cju<_&-)!L$JFZbuRO5g& zFQtyvL22E~sN55T)G;^T!=XlqR+iDxvyLyAOUoFv@Dde$k=IG-_K#Oo$6+z#&XP## z>*uq_(x>(>hi?{A-Fr-r==hxV!!#^i4#9a3tH%pw@X^|GokcS;y4?$V;t~^jFcdm2 zD~h(-&-6tLO%)i_HRGp7+-7(GCsjdiTO1XV0*NLNg%{=#J*Ecpu9#WGQRsd}?yq^w z>hz@cHB>Oso<~nr)GVVscXrC}M}IqVxK#O`kDvg6814^$;bTbrbE363F*J0rr~mW9 z_{WT!tG;Np{T0mvU+3-Dh5K@1YY$wkh6cUZ$wH^joN>P#QjR`#Wx5tavNyhbE}C*e zMAmb*b^JyA7@-oUhWN}ZK97@ir1jutqtyNUXyL3WYwRnT=hB&WdFuPq{%MkKjV)){ zz07fgL#76sH(CE4KAZRJ@a+A~#qGlnl7gViN**mXZJC1mVW;OtS1G4seQHmcyS}S5 zJg4Kh$LotJ?sojxTLq`-voc)gul{#dZL4hQ!Nc9g9=YS=%Ti2IZ1^n(-geS(gUe3_ zN8TQ*?fCZAEu+ROr*pv-_~+WJhi9veE-USpGCa%$qkUHP?B0t7!MEF~ruWf>4Qni3 zI3pbkFYBY-2D>Px4XZd)`cEEanB$fz##V2ITxJz)f#g>21uKGWcZ84ibs&l5TiPY^ zGxQ$4c{OMBU$IffPPV^lcv)nAJnrekdwa6Efw#jDe$%P)z+(r4^?Z|?j<73j3o?5MUnsrxmf*K6zG zK835+Hy4gqu2-*23vDf#KC$(+YO!@moa>sZaN>p#|=Atx@ZAWzG|kSH6{o zqO0jUwCf92{C&5GV ze||V{UNY|+E^XWU5w~m&`~145^B{2&)yiW(dd&8c{v>1+;LNq~B469MWX~fesF>?F z%DO%-l|-koQ4@9L5i%4I65R0}K`sMvGK+)e`7$J~3l5U*SBRGEcu z{#*@jtFqNLSj$Som3~G}X9LHQFDl@4~6`pdpNi z1_=(NUjU~YBnr?tPjFa$FqNByce>DT`JFfU@SdUr1N-9Pz<9c z6gAfL>aO)7IM5JG?32L|o&}&EIMv`}Hg1lKWQkZ^}Ov8j>Eyb`+B}*Y3a-Y*~ zK|qYTfcVaEa&ee_lk;qR_47Z#MxGuEfa3MZYIP{HeZv1}+(=wuWl?VfF5~GNZ`Qsv2LB2q{X~;7 zyWs9B=CbB2nC7Ea0O&v(q2~brItalLP984h%W9}dfWSxNj>_MV1@dX(ijD=OBSAr$ zXFhtar2ypH&h^pr=3?0Cag{xb#XA;34~H~~$}skXi8v|wih z*nPmjT+T!U1GoZUf3^&pqJ(XyQa2exxy8Sq1`Xjb1}Z?bLi9!SmnM9$BqHeb7+*36 zwGYKr^;Jw85S=m#m* zaJWUx))A5i$HxH+uv0R`SSui!^IjV$X%Lc?20<+@eGOeMNp7qcC&|0!JIMA z_-DCROQ$i?Gu?&-3;84N=61?TGZ~3WGJzGus49N}&N<<1?I9)h2!J=9)BluZfN*Rw%QzSmNlqrIO6ti0piibr?*%5uFF??v~ z*JoJ^*5%snL<|XZ%yDolO#_-4z*m#^&HCNtca9Rvf)VcfaR2_5G(~z zAPjx7rR`=FW=&0I6+T}Ti-3yI@^T|6enNq0h{v-xqR%e&5A(Svf+(A`CrZT3hARd} z3TXBLLHtRC!#Sn8DSG89y#RSeVkn}7(2!{l*_DI|++$C6z|l&K7!CZqF(iWIF=xX0 zU6!6mN0){#1_v4R2q6>a%r9u!UQGs3$b$PEn0Pd`I4?c}O7L)yKx-s>M?ivLGoYT- zF>x&hd+nuU3^*RO+105 z43Hi--}|roMhQ$vV;T65{zC9peSt>WKB46M;!cHdJ-Df-cnu{Yo&+1why@k#WvTdS zk{tky5`J4T7wwWaF=1piIPM0J)}849ZJvx z3Sl&3e zvRJk|L-fp1eb;wqff6-;JHc4RodQ7&fl3f5KrItwQ?3~}S1SxuSdZ0OYL5H>rNo3f z<0ZKSYl|^F5L`)Hm7#`iiGpWXJXIDkbbqpWnu{?+5VPj8(6E``mTEB+?GD#;&=TJ$ z$98YPs~9PZ!aR>2D-f6JK++Q{2wKH%7W-T1dgstHhN{HDsQs+oK>>6$yG&&?+Ahq! zjdn57<+qcSkR8xPQId){Mjwu)9B~v&dD1Ya&rm|(l3T!}%nxa|bgfBR7D;>J1$Y}` z$bs1kPc<5e5h&vhi{KSVHP51%3fsMgUXR z+4hT5wb0m54Z&FI;?AK^nvzfvImOSm`C2X$u8E$Feug-~NmMAtcIiDcprN76>;ee= zjaqXQ8VnLB89FIcD3&G?G1*^gx4z-3J=TCYM^T)FKD2w$E&CNrqgT_)W(MOZ<}*_fq_CFDjc}89MBA~@K91EEsS!5tg+MsABLVB;rR1gcAz$rUe zt+v%(VyivU48OfLPd{kp>9Tkh9oew6SjskHY(3id%abnk)k}Q6M!sglQ&MK{)51%I z%Jr_Z9-c&jA#2LGsoT(dW#$IzdhGfO{@;04q!_aswjYr?aIpVzea!U7`Zz7#vf>8= zO8+|jqO-}9)=!@>;a1!ElvQ+zL__!rbIK`EO7r9H(dzSd1q{)6(mgVwQ_B5&9?SRB zt3x7ahpioQ&j^=6MXDiBzYg!^D7}b?JVSA4r7MsQJO51O^L5&BaeT?KCLvx5 zDL;GjlE8h;M0>H(Z%VBJ-z81OXdQ0Xm=pF`%Hj+*LECw5Nl;0xAfR6%1PoJjJaQJ~ zuBKQKMxo7qdc}ng)v^rY{SqsN?>Fm-F9lQ~2Ub>mMj;+Vqkon+ZKl>)Lr0PeqQmk6 z;?$*9=s%Co)ltJtSY(W8%inuG9B*q9Q59*6n#a{ZARu-r*a<)SWTFjeJ8P2)jq zvGi-j?yy%b7xE4Fae1FYV_YP4f7Ad4RF^Z1cpblNkd*|VZTav--~zlNvB(G4sfPcD zF{D;p@7KOHGu7w);0@zxb7JHEba`;L3t%R01Q_}+_Iud{NE&V0n6V@uWj8EMG60mV zd9kzGs>!>Hrhh4-x6Qtdca4GpA)K0y2i2{@x~(=ljS?~JE#;7S`?NXs2Ae>Y$%ul1A>jUPiaq&#~v zr+JY%d%a_Gp7f2d_2Y_>=>__5QsWo->Zpt+B6@HWH&HTZF=S!_)Z0tP*qcGxAj^XI zCQ8Xda@&)#L1wtsXa->1k@KcH8sxaMZBoU5Vj0C}QqC^KPAojSN)h&`!BE`OA)G!< zjHhWzUnJacg#`qFYw}EZd)=F7{&EqIjZaW9yp(s9DCz|zG_joJc`p6NQ1%U z(8V!oG=a5u0Sr1>8A&(W>z8MzT}pa@xvdYNAP|bp&CoD*@iju|ZIfi$gbf{_P0WyzGgHlXQ9o&zhy@(|Wy`9!BSB_qe=I z()PH#>UCa2RPCE8tloi>Yo-}~eQBt8yG~kne}CJo;PHMHVbhAgtmt^{KK6dOPMYaf zq?Wuql3DL~yL?vhe!J3M_c)zc+cr@Pk`eU_boQff>!`Mo8DSV<*b*UCl zIvaZ|j&P5d2rM}V5~l@^R>sU#*^*}usS>)5&sNMPm9Dy(VRnkD(s#&2)LXnw9{GZ7 zLD)7PGB46&8Vi}C=Bo&S8w>JM?Su%TqF&GLb##mA80i*5Z$TmnEr`2Ao~&ln8m){( zN|%5fKT-WFIwnGsWPHv;xi2yRM24QxaLptt&}NWxi(xHx8lOniLb?He+EI_ViDaKH zT_mK6$!=f_oKc*K+&H$+@T6c1habhYK(cwGezO6fXTEGA-7Yx- z4l4TKq!osfQ1*?l^-JWHs85uwsQJ$gFZZnWFnhZ-sbdl`zt|Fe zd*0^iQwYo)WkE(j5YGn^toVBDya}`ClxXYihGG2vo=R)#gZ2dg4`y?j@Ln1&>6VCNIn*SuQF&n>{Wz7kuCs!mSWJzfa5Rc5 zY;Mf<__PN<}1& z%jzAI7R`lZ;;WXKTq0{j%$8KO4fpKUIh=B=1?U-f_Zqh%3^(v{6_MdJ6TgPgdssQ<~gH3cO^>0lxFk{?e1^WmKRAlAQbnRF5k?(L)9iz zgrpePM!Ts@_sdx8;J+cpD`)QEwOFD<7Lcwv9)dR=%atgHNa+@R(#B6q8n0ix!6b<$ zOd~2UWIxTPTsfR#;@DkkP+-;GPf|=4)b}V4laCw1-wqVnQ_OoowAF&0K$&RX z3&gBPbx?M%&r&Ti(3M zjCqbQEyi8vf&i zhuBw{8OQl3-K%D*=)Nz(WWieHtG`hPlLeew_odB*iF4n$=Q+QBj+Q6FXOUC!8deO& zY@@7$295+}l%Tf4S@Y=Zwd<8v2D>&&e=JI8zG+%-eL?ZmHhmY^xo5#g0F#ZCOJSW7t(g@+6~8v~`!x4NY$r*6 zV)p*5!2y~3sWzT3q8?uAWMLm~-Tkai>ZNLL#FeZ#Tb_iX@$$QXARW3Q4f4&r!d}#O z1ydTdWHCOZT0+#P&K(c;Vw1j2vl}W})1cY8aKE;q$ZxWLDt2V( zX;J_uM*UiM6tS?z#gVoru3SCA=5suloyERbz;Q{2H|8wrb`U77JbeU}$hx?Eu8ngk!4lso%8^rVE>ZKGJ?L*N#OHGR?ppWG@%fR^3dM9sV2T z<7fmeLxIJ#2eedhq!mZ9!bRQTO~h)S8`k(}p|+8Y4YHwF$qf zS7~$}mUZz~uoQXHFCp;`i-ilIeHUHfkLh5R;fbi&;3p)jY~S%EFFgd06;!CK(4 z(*uuZdgnSBm4OgAN6a{ue;E$4V$$TS?yt4*S57jTRvNL+uJc0E4_LT>m`AHN4B@-7 zo~jEc`Nj1inntwbUrTLXh0dh=w>G)ekglKnNeDDEYJD#s5Lf@r{uQXKWfl^{6!c16si{#nc*wZRT~JW zGE9~hKDBRurHpizN~K5#0sCn?2#1_?i+k0gWdm(L&NT9kPHfDr*|>*PO8!=-FnDsf zTZ7}%9!$|_!n9SfI(1eSDCNbE!-CU(kkhqy0_f&Fgchfn%o|lR=EK^*pT5N!y*#z{Txv+$+&_H#y zOxif%8_GqyJM7&q-1}uUnP6W{Dk?~0plX&jL)^L(icWYKA{tS$BCVZ?#N2Rv2>ZXK zU)4IiAp7ABuo3_ODF2kciLRZYfr5jbsg?1cGeD2(vfc6*B+vEYSMYeedQK&I1CF>h z14|jkYA(41R8v~=49@^j(Vib9UjP&$kKbRjUaPoZwIq>a%-8Fwb{ATG4$h_vTHxut z9y5$B=xe_hH{ztXao{q_^-z89J+r&H-E_K|M`TV!ha6WVq!R(x74Fb@y@W^a`xfL3 zZO<-VM$02zKqf6THp-zC2JBofzQ3|1)0X-}9y%jg5hB%i`g(erN5-Bm95Gx;X<>Ns zG58v>1nSY9)aW*$rsKuZ!BKZ-Hn6QZX)koNfPVZY zei~vOZ!Oi9+DRNgX#RXBZor^eu}gZ44BrcDEpwkV+VUY|d5^2XX7!>ju+}b^qgcnh zae2rkD7+12`~>Uxp}}eDo2L#r^-p_KiqgIsy}R+j!<757$5B5+ zGvjY#@HBgQWwpGrP>9g_U*>3lkd-bXNLQZlxGZecdlC}on62`5Gy2zd-M=eVWkn-_ zunld@GHx5D;8sFjgUCdspedt_Ii`%{-L^6wdnc~~8TYrI_wSN@hsf{XpU~e2VleU1 zWX6jN2kdp3C9uDTp64<7VajzKU|4yD(%epdIvH5lvM1jW1z|}bRYzMSJotX!4Qk~ImZRHL(f>+F62~rq>OXZLN`Jgw>457p`^z+8|2$Noqr|SoL{tngyHvo*;27}4?AVH~a zFjwpuk6wvPUp7P^%1F;(|Dr5~pMu0Qfwn;%^I6(NbaR)zD>B&IxGf2Q2->@V^$3wd zgP@PXv)qX!CxIc3HV#p|0h0IG=ER>SOw)7+I|cONhA+pB_2j^euLxCcBAFC*oD2?2 z7z^xMrQ+FCXzB6XlP62+&1l7RjO4l%wCqg+(G1W|0K7lkIcwNG-4Acj=8*9_Pb9hc*Zcf+xH3Hqy zE)@Kc19iSG{fMZTH<2*c=b@&ysF>zc@K0e*Qpxm99*1?`# zd2}Xj`jx0-?QeTj%o*FBDtx`!D|53KU-x;mB1x)@c%|86%?Gnniq|e~OJuUO(VaMZ zREj>^pgDLwP#omPS495`on&S&;$$lJCtENmF%m{nxi1>LvLMecN=^NX-R=iJAhUc% zp6qLXtc{|xoid3)z&*n&nJ=}254b(g)ap$GAf{+_2RQt_!n4W3K+uQ86-4%u=48V! zXS2RGYuM{n3YJop4}c^cnsjT`dEjAWvsb5d>Z?{(WtId3z$*A`ULBmi4}f?d-G2YM zhFyXyksF2ewHm@0J`tj8&~ip#q-=)$60=17sL5==qA9nWL>GJK75PH2@8QvUb1C4b z447k#{$T@bKXg8oL|z-yy618J!XQ6R$^5E*&*|HW@Y`Kc=~}iuGjJpqf>LT!V{oZ^ zKyz?XQeL`Gr&-uumnSXQkl0)U9<(-T<$YPN0|kT?u1mWdu>u!<#X zBsS9KoE8F3aKjsnMc=CSjK?v6XT?&naBE{A`9gGIsE9}8LcP(`bKg!7pECzmuiHu%N1nS!%;s2WO$B+Oj4UqSAwn7 zqu$f@0>+?q=3Ys_%=vBPixJjXJwHi>QZ;OZKl~@jXUgtEc=?ptAS4x5`zLsc;6>K(?ZP-4eRRPpdgjS~=n>}wOC+Yqw!`O+(*9Lu~sLbD~96sxW5_Ox1` z#>1i3DK(4F!Q+#Wo6jPMo(_Q24ma_I?VBrKN>gz2tw8r_L5zW8 zG?2usCr&K|6{n&lmfUwf<>2N3ECpk_6Avrl_xw5m>(zVe7XVrm^$eLo=ooi~J;aJ&6(PG=D zJ_D!1fmvpm_kKroz?-~7L-Utee){AXX}m&IM=)(Z6Rq6QbUb|G`x?5xyN(%;$J8-K z@q+;@e}ZyYq)?YpTARUZYOLp=IJ|y-&_PEMWRN6EngS$OTHezqy+cJqAjxlN&A_9q zbVGV{ctM@4frvXR76_RHb*j%}0!k4B!tHhxZn*5*s={9DWe?nYRTT|7GlKYa zY>t?tVFo}&D4^o#aS?5?1l7x0<840q{@icKJdd^NS ze&9Yj`6>Mj5fm$m81yj*5sE-R$DFsmNs3o?ve0t7Jk>FbbQ8^JbZ>g`Gj*zKPmQw!nJf zFu2eee6D9zpkFz7%(88DE^HoK%s-^20Ipz`5Jg+GlN^YKNu|#9Pnq5|SZ#Rp9^mBs z8hA8$wlFw*zt*zPRU2rYG1p7x`$}%C1MyQSqoTZJ8*QdMS-Z3`6gT-|c;W0ERc>g9 zWM4%U)eINVqxK$C@Yb$0{Fqjc_Z@!Wx`aOg_lV^kZq0ZOX{CQ&C2n6%SACZ;@;FGb zeS2ryuC>o$)(^9PFM0pi0{ZV2_|)U4jF^v9ILmi8Ey&!sgV5{fVXG+ zt(bc9o>XIFr&^A+-dmAnlyih^TPLxHi0{Cqc1sJRu`gPyNjzeRa%!~L#=2s62!oEE zcltkDW$8LAHaJ085W;s1a%8>4>O-_-v1ZZKFpb4@k(-=;CM4@D$kNZIt^mp~T5@T# zW{^lvVI_FjV<+WH2B*&XnK4X+e)^)(2oD*j;nhO?jMQd@8TnrQx$)k#z;;F7x{Qgv zh$lNGKy!Yy`H?~RN9Ht7G`viAabA_DGL&fBgm~63up>||&S~m1EiFD>IvD~)Djz{~ zCPrVBYwQyabO*^1NO3N#Y^Xl{r`8o`dC?U|1MT=~_rg*bED#TYjo$Y<6A*-5mmIYNNqW`?lJK1E;4ygn_Z12FshZ*EAOBL= z$52N2_hGDSWAlHb_~XU=^GJ*ND=nYm{xha1@{cLWZ3zvsFA=LbGp9sq9O7LwZ|*S2 zptd_k&vp16^@|Y#^wKeQ1f{#xQ}O^eGhnAWk5wKztK5NJ-EBAi!d(zmtCQV8S1}aA z1b`|7usv;bUQeC;BEGIolOCq3DJ5*V&5y4_me`ytao+fV@a8GEJRKSzSeEcFpLSCk zxf9;`v9B`Uu5@{XSS?0b`?y_H9>iOqx#jZfLxLv-=rgL|A%tJg7&(H={S6|25O?T6ld%x3?X>wti1KOzf%Usm?7 zm-4Uc-xQh2O8h6me^$Qy3;4%1 Date: Fri, 23 Jan 2026 15:16:16 +1100 Subject: [PATCH 2/2] risk register in csv format risk register in csv format --- .../T32025/Risk Register.csv | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 EthicsGuidesandDocuments/T32025/Risk Register.csv diff --git a/EthicsGuidesandDocuments/T32025/Risk Register.csv b/EthicsGuidesandDocuments/T32025/Risk Register.csv new file mode 100644 index 0000000..d9d7586 --- /dev/null +++ b/EthicsGuidesandDocuments/T32025/Risk Register.csv @@ -0,0 +1,31 @@ +Risk ID,Risk Description,Project/Area,Category,Likelihood (1-5),Impact (1-5),Risk Rating,Mitigation Strategy,Owner,Status,Review Date,Registry (Permissions), +CY-01,SIEM logs may capture unnecessary personal data,Cybersecurity,Privacy,4,5,20,"Reduce log verbosity, apply masking, retention limits",Cybersecurity Lead,Mitigating,20-12-2025,Edit (Cybersecurity Lead), +CY-02,Improper access control may expose sensitive incident data,Cybersecurity,Security,3,5,15,"Role-based access, audit logs, encryption",Security Architect,Open,15-01-2026,Restricted (Leadership Only), +CY-03,False positives may cause unnecessary investigations,Cybersecurity,Fairness / Misuse,3,4,12,"Tune detection rules, validate alerts",SOC Team,Monitoring,30-12-2025,View Only, +SOC-01,Network monitoring may reveal employee behaviour patterns,SOC,Privacy,3,4,12,"Minimise behavioural analytics, enforce strict access controls",SOC Manager,Monitoring,22-12-2025,Restricted (SOC Manager Only), +SOC-02,Over-monitoring may result in perceived surveillance,SOC,Transparency / Consent,2,5,10,"Publish monitoring policy, limit scope",Compliance Officer,Open,10-01-2026,Edit (Compliance Team), +SOC-03,Analysts may misinterpret alerts and escalate incorrectly,SOC,Accountability,3,3,9,"Training, review process, dual-analysis for high-impact alerts",SOC Lead,Open,05-01-2026,View Only, +WR-01,Wearables may incorrectly predict health emergencies,Wearables,Safety,3,5,15,"Medical review, improve thresholds, expand test datasets",Wearables Lead,Open,10-01-2026,Edit (Wearables Lead), +WR-02,Location data collected without user awareness,Wearables,Consent / Privacy,2,5,10,"Add explicit consent flow, reduce telemetry",Wearables UX Lead,Mitigating,20-01-2026,Edit (UX Lead), +WR-03,Data sent to cloud may expose sensitive metrics,Wearables,Sensitive Data,2,5,10,"Encrypt in transit/at rest, minimise fields",Security Architect,Open,15-01-2026,Restricted (Security Only), +AI-01,Training data may introduce bias into predictions,ML/AI,Bias / Fairness,4,4,16,"Fairness testing, balanced training datasets",ML Lead,Open,01-02-2026,Edit (ML Lead), +AI-02,Model decisions may be opaque or difficult to explain,ML/AI,Transparency,3,4,12,Implement SHAP/LIME explainability,ML Team,Open,22-01-2026,View Only, +AI-03,Model may be misused outside intended purpose,ML/AI,Misuse,2,5,10,"Usage constraints, documentation, access controls",AI Product Owner,Monitoring,30-01-2026,Restricted (Leadership Only), +IoT-01,Device telemetry may leak sensitive data,IoT,Sensitive Data,2,5,10,"Encrypt telemetry, reduce fields",IoT Lead,Open,05-01-2026,Restricted (Security Only), +IoT-02,Firmware updates may fail and brick devices,IoT,Safety,2,4,8,"Staged rollouts, rollback support",Firmware Engineer,Mitigating,10-02-2026,Edit (Firmware Lead), +IoT-03,Devices may track users without explicit consent,IoT,Consent,3,5,15,"Opt-in flow, allow disabling tracking",IoT UX Lead,Open,18-01-2026,Edit (UX Lead), +DE-01,Data warehouse stores unnecessary identifiers,Data Engineering,Data Minimisation,3,4,12,"Anonymise data, remove unused columns",Data Eng Lead,Mitigating,15-01-2026,Edit (Data Eng Lead), +DE-02,Pipelines may re-identify users when datasets combine,Data Engineering,Privacy,3,5,15,"Apply k-anonymity, auditing",Privacy Engineer,Open,01-02-2026,Restricted (Privacy Team), +DE-03,Lack of lineage may cause misuse of historical data,Data Engineering,Transparency,2,4,8,Add lineage tracking and documentation,Data Team,Monitoring,25-01-2026,View Only, +WD-01,API responses may expose unnecessary user data,Web Dev,Privacy,3,5,15,"Limit API fields, field-level security",Backend Lead,Open,30-12-2025,Edit (Backend Lead), +WD-02,Poor consent UI may mislead users,Web Dev,Transparency / Consent,3,4,12,"Redesign UI, clearer messaging",Frontend Lead,Open,12-01-2026,Edit (Design Lead), +WD-03,Auth flow may leak info via error messaging,Web Dev,Security,2,4,8,Standardised error responses,Security Engineer,Monitoring,20-01-2026,Restricted (Security Only), +OR-01,CV system may misidentify athletes,Project Orion,Bias / Fairness,3,4,12,"Diverse datasets, audits",Orion Lead,Open,15-12-2025,Edit (Orion Lead), +OR-02,Camera feeds may capture bystanders,Project Orion,Privacy,2,5,10,"Blur non-athletes, restrict zones",Vision Engineer,Monitoring,10-01-2026,Restricted (Leadership Only), +OR-03,Tracking may be repurposed for surveillance,Project Orion,Misuse,2,5,10,"Usage rules, access limitations",Project Manager,Open,22-01-2026,View Only, +INFRA-01,"Misconfigured S3 buckets, databases, or IAM policies may expose sensitive fitness/health data to public access",Infrastructure,Security / Privacy,4,5,20,"Infrastructure-as-Code reviews, automated config scanning (AWS Config/Security Hub), least privilege IAM policies, regular cloud security audits",Cloud Security Lead,Open,01-02-2026,Restricted (Security Only), +BC-01,"Ransomware attack may encrypt critical systems, wearable device infrastructure, and customer data, halting operations",Business Continuity,Saftey / Privacy,3,5,15,CISO,Owner,Open,25-01-2026,Restricted (Leadership Only), +IAM-02,"Former employees, contractors, or unused service accounts may retain access to systems containing sensitive user data",Identity & Access Management,Security ,4,4,16,"Automated deprovisioning workflows, quarterly access reviews, identity lifecycle management, least privilege enforcement, privileged access monitoring",Security Architect,Open,30-01-2026,Edit (Security Lead), +COMP-01,"Fitness/health data processing may violate GDPR, Australian Privacy Act, or other regulations due to inadequate consent, retention, or security controls",Compliance & Governance,Privacy / Transparency,3,5,15,"Conduct Privacy Impact Assessments (PIAs), appoint Data Protection Officer, implement data subject rights workflows, document legal basis for processing, regular compliance audits",Compliance Officer,Open,15-02-2026,Restricted (Leadership Only), +APPSEC-01,"SQL injection, XSS, or API injection flaws in web dashboards or mobile apps may allow unauthorized data access or system compromise",Application Security,Security,3,5,15,"Input validation and sanitization, parameterized queries, security testing in CI/CD pipeline (SAST/DAST), OWASP Top 10 training for developers, Web Application Firewall (WAF)",Backend Lead,Open,28-01-2026,Edit (Backend Lead), +,,,,,,,,,,,,