The fit check

Fill the risk record and name each risk area with its caution. Run at founding, when a request changes users, data, money, autonomy, promises or reliance, before first /setup-hosting, quarterly /maintain, and before a handover.

The three questions

Ask one at a time, with a best guess:

1. Who is exposed if this fails, including people outside the team or anyone whose contract, promise or deadline depends on it?
2. What data does it hold, and what can the team not afford to lose?
3. How would you recover from a failure?