Files
veripath/docs/templates/threat-register-template.md
T

1.7 KiB
Raw Blame History

Threat Register [Client Name]

Status: Draft / Human Review / Locked
Last Updated: YYYY-MM-DD
Reviewed by:
Source Inventory: Link to locked Data Inventory

Purpose

Identify specific customer-acquisition and retention failures grounded only in data from the locked Data Inventory.
No speculation. No invented gaps.

Threat Entries

Threat ID: T-001

  • Title:
  • Signal Source: (e.g. GMB reviews, Instagram comments, booking system, website)
  • Evidence Snippet: (direct quote or observable fact from the data)
  • Data Recency: (Snapshot Date from inventory)
  • Estimated Severity: Critical / Major / Minor
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Context:
  • Human Decision: Verified / Downgraded to Tier 2 / Rejected

Threat ID: T-002

  • Title:
  • Signal Source:
  • Evidence Snippet:
  • Data Recency:
  • Estimated Severity: Critical / Major / Minor
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Context:
  • Human Decision: Verified / Downgraded to Tier 2 / Rejected

(Add additional Threat ID blocks as needed)

Summary

  • Total threats drafted:
  • Tier 1 (Verified):
  • Tier 2 (Indicative):
  • Rejected / removed:

Human Review Gate

  • Every entry is backed by real data from the locked inventory
  • Every entry has a Data Recency date
  • Every entry has a Verification Tier
  • Human has reviewed each entry and recorded a decision (Verified / Downgraded / Rejected)
  • No invented or speculative threats remain

Once this gate is signed off, the Threat Register is Locked and Layer 3 (Economics) or Layer 4 (Requirements) may begin.

Reviewer sign-off: _________________ Date: _________