Technical risk guidance

Discuss the risks that matter

Identify the issue, affected system, potential impact, existing controls and next action before a technical review.

Prepare the conversation

Topics to discuss

Describe a specific technical issue and affected system.

Explain what could fail and who or what would be affected.

Summarize existing protections and remaining uncertainty.

Identify an owner and the investigation or improvement to discuss.

Use WhatsApp, phone or email to discuss these topics and agree the next step. Keep passwords, API keys and recovery codes out of your message.