Record and examine risks
Make each concern specific to the people and use in scope.
A risk register explains what could go wrong, who could be affected, and why the concern matters in this Assessment.
Add a concrete risk
Open Risks and add a risk. Describe the cause or situation, the potential effect, and the affected people. For example, an inaccurate output matters differently when it drafts an internal note and when it influences a person’s access to a service.
Use the available risk categories where they apply. Typed categories, such as discrimination or vulnerable groups, can meet corresponding checklist expectations without a separate manual evidence link.
Review requirements beside the records
Selected standards place relevant requirements above the stage’s records. Open an item to read why it is present, inspect the cited source and criteria, and see the records that meet it.
Connect the response
Add the controls you intend to use and identify what testing or evidence would establish their effectiveness. A description of a control and evidence that it works have different roles.
Keep residual risks visible when recording the decision.