Northwind Payments Ltd · 2026
Risk register
Connect business risks to the controls designed to address them.
Scope Payment platform · CDESample catalogue DEMO-01Assessment Draft preview
Qualitative sample risk register. Residual risk is not automatically reduced by control status. A validated, versioned methodology is required before calculated scores are introduced.
| Risk | Linked control | Treatment | Owner | Risk rating |
|---|---|---|---|---|
| DEMO-R-1Critical supplier becomes unavailable | Mitigate | D. Chen | Not rated | |
| DEMO-R-2Unauthorized access to privileged systems | Mitigate | M. Novak | Not rated | |
| DEMO-R-3Recovery cannot meet business needs | Mitigate | L. Grech | Not rated | |
| DEMO-R-4Sensitive information retained beyond its purpose | Review | M. Novak | Not rated |