Risk Register
| ID | Risk (cause → effect) | P | I | Score | Response | Owner role |
|---|---|---|---|---|---|---|
| R-01 | Single accounts: one GitHub account, one Cloudflare account, one hosted-wiki account and one Google account hold the whole estate | 3 | 5 | 15 | Keep recovery codes safe; second admin where the platform allows; Git copies of every site; this register | Executive |
| R-02 | Backups incomplete: Internet Archive saving refused anonymously; data stores have no recorded export; some sites exist only as direct uploads in Cloudflare | 4 | 4 | 16 | archive.org account and keys (Executive); scheduled exports; move direct-upload sites into Git | Executive / Tab |
| R-03 | Privacy: personal contact data on public pages or files (swept 19 Oct 2026); old Git history still holds redacted data; new pages may reintroduce it | 3 | 5 | 15 | Build-time privacy checks on every site; repeat sweeps; Executive decision on history purge | Tab / Executive |
| R-04 | Credential hygiene: tokens and keys need rotation; one Worker variable should move to an encrypted secret | 3 | 4 | 12 | Rotate on a schedule; secrets only, never plain variables | Executive |
| R-05 | Rate limits: platform APIs answer 429 when several workers run at once (Google, GitHub, Cloudflare, HubSpot) | 4 | 2 | 8 | Pace calls; retry with back-off; one worker per platform task | Tab |
| R-06 | Free-plan limits: one Pages build at a time and 500 builds a month; database limits on the research and FCG sites (research importer runs every minute) | 3 | 3 | 9 | Preview builds already cut (19 Oct); slow the importer (awaits Executive) | Tab / Executive |
| R-07 | Worker machine disk space (about 2 GB free at times) stops builds and writes | 3 | 3 | 9 | Shallow clones, delete after; clear caches | Tab |
| R-08 | Concurrent edits: several workers pushing the same branches or editing the same wiki pages | 3 | 3 | 9 | Fetch/rebase before every push; 30-minute wiki rule; no force-push | Tab |
| R-09 | Dependence on the hosted wiki as the primary record | 2 | 4 | 8 | Estate mirror (wiki.bucklerfamily.estate), e-book, this independent site | Executive |
| R-10 | Dormant or down addresses confuse readers or lapse | 3 | 2 | 6 | Triage in S2; campus shows only live sites | Tab |
| R-11 | Published claims read as findings | 2 | 4 | 8 | Case material framed as “our case, prospective”; evidence IDs given | Tab |
Scale 1–5. Scores of 15 or more go to the Executive. Earlier risk logs of the evidence workstream are kept in PRINCE2 Control Registers.