CovCare V6.0 / Enterprise reference
RAID register Open risks, assumptions, issues and dependencies. Remediation and operational readiness are not established.
Use cases Stories & tests Traceability Capabilities Responsibilities Service blueprints Metrics Decisions RAID Roadmap Architecture Review draft Proposed design, not organizational approval or operational evidence. Public fictional demonstrations only; no sensitive information, live submissions or authority changes.
12 records · all proposed
RAID-001 Account registration not verified
Type Issue
Impact The current public creation path is unavailable; positive account lifecycle remains unverified.
Owner Identity owner (proposed)
Mitigation Maintain anonymous discovery and validate lifecycle only under separately approved scoped testing.
Status Open — no completed remediation claimed RAID-002 Authenticated lifecycle testing incomplete
Type Issue
Impact Persistence, recovery and positive permission flows have incomplete current evidence.
Owner QA and security owner (proposed)
Mitigation Approve safe test scope and evidence without synthetic production identities.
Status Open — no completed remediation claimed RAID-003 Shared preview and published backend
Type Risk
Impact Code versions do not isolate production records.
Owner Technology owner (proposed)
Mitigation No production writes from this documentation phase; require explicit scoped approval for future write tests.
Status Open — no completed remediation claimed RAID-004 Production data classification unknown
Type Dependency
Impact Classification and backup/recovery readiness block backend changes.
Owner Data governance owner (proposed)
Mitigation Obtain authorized classification attestation and actual recoverability evidence.
Status Open — no completed remediation claimed RAID-005 Operational staffing unconfirmed
Type Assumption
Impact No triage or response coverage is established.
Owner Central program owner (proposed)
Mitigation Validate staffing, supervision, escalation and coverage before service launch.
Status Open — no completed remediation claimed RAID-006 Live support channels unconfigured
Type Issue
Impact Simulated chat/call/message cannot connect a real responder.
Owner Support operations owner (proposed)
Mitigation Review providers, consent, monitoring and safeguarding before integration.
Status Open — no completed remediation claimed RAID-007 Partner vetting workflow not operational
Type Dependency
Impact No live onboarding, assignment or service acceptance is available.
Owner Partner governance owner (proposed)
Mitigation Define scoped verification, renewal and supervision before partner access.
Status Open — no completed remediation claimed RAID-008 Financial transaction processing not enabled
Type Issue
Impact No real payment, receipt or reconciliation occurs.
Owner Finance control owner (proposed)
Mitigation Review independent duties, provider contracts, restrictions and recovery.
Status Open — no completed remediation claimed RAID-009 Legacy network remains quarantined
Type Issue
Impact Unscoped network access must not be reactivated.
Owner Security owner (proposed)
Mitigation Keep containment until dataset, organization, site and assignment controls are reviewed.
Status Open — no completed remediation claimed RAID-010 Translation completeness not verified
Type Issue
Impact Executive content is English; youth translations are machine-assisted.
Owner Accessibility and language owner (proposed)
Mitigation Commission professional review and complete approved language content.
Status Open — no completed remediation claimed RAID-011 Accessibility certification not established
Type Issue
Impact Limited keyboard and layout checks are not full WCAG certification.
Owner Accessibility owner (proposed)
Mitigation Obtain assistive-technology and professional accessibility review.
Status Open — no completed remediation claimed RAID-012 Cross-account privacy testing incomplete
Type Risk
Impact Positive owner, staff and revocation isolation is not established for all paths.
Owner Security and QA owner (proposed)
Mitigation Require approved scoped multi-account tests before operational access.
Status Open — no completed remediation claimed 