# Risk and control record

Author: Adrian Sutherland  
Edition: Version 1.0  
Prepared: September 2026  
Copyright: © 2005–2026 Adrian Sutherland

Fictional worked record; decisions are proposed and checks are unrun.

## Scope and source

This record covers SEC-R1: disclosure of unrelated learner information in the
partner handover for case C42. The example begins with a process-only trial;
the later case service is unimplemented.

## Harm and assumptions

Broad partner access could disclose unrelated learner data. The partner's
identity and which cases they may access require agreement.

## Controls and ownership

The information owner defines permitted fields and which cases the partner
may access. The case service checks authority before reads and exports. The
platform owner protects credentials and access logs.

## Assurance and remaining risk

Checks for access to unrelated cases and disallowed fields are planned and
unrun. Risk assessment and acceptance remain open.

## Change and review

A new partner, a new use of data, changed access for a model or tool, or an
access incident reopens the affected decisions.