Files
veripath/docs/templates/threat-register-template.md
T

52 lines
1.7 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Threat Register [Client Name]
**Status:** Draft / Human Review / Locked
**Last Updated:** YYYY-MM-DD
**Reviewed by:**
**Source Inventory:** Link to locked Data Inventory
## Purpose
Identify specific customer-acquisition and retention failures grounded only in data from the locked Data Inventory.
No speculation. No invented gaps.
## Threat Entries
### Threat ID: T-001
- **Title:**
- **Signal Source:** (e.g. GMB reviews, Instagram comments, booking system, website)
- **Evidence Snippet:** (direct quote or observable fact from the data)
- **Data Recency:** (Snapshot Date from inventory)
- **Estimated Severity:** Critical / Major / Minor
- **Verification Tier:** Tier 1 / Tier 2
- **Notes / Context:**
- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected
### Threat ID: T-002
- **Title:**
- **Signal Source:**
- **Evidence Snippet:**
- **Data Recency:**
- **Estimated Severity:** Critical / Major / Minor
- **Verification Tier:** Tier 1 / Tier 2
- **Notes / Context:**
- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected
*(Add additional Threat ID blocks as needed)*
## Summary
- Total threats drafted:
- Tier 1 (Verified):
- Tier 2 (Indicative):
- Rejected / removed:
## Human Review Gate
- [ ] Every entry is backed by real data from the locked inventory
- [ ] Every entry has a Data Recency date
- [ ] Every entry has a Verification Tier
- [ ] Human has reviewed each entry and recorded a decision (Verified / Downgraded / Rejected)
- [ ] No invented or speculative threats remain
Once this gate is signed off, the Threat Register is **Locked** and Layer 3 (Economics) or Layer 4 (Requirements) may begin.
**Reviewer sign-off:** _________________ Date: _________