What could go wrong.
THE QUESTIONS
What are we using it for? What would a wrong output cause? Would we notice? Who is accountable? What data is involved?
THAT THIRD QUESTION
The critical one. Undetected errors are the ones that accumulate.
WHERE RISK CONCENTRATES
Customer-facing output Anything published Decisions about people Financial matters Automated processes nobody checks
WHAT TO ASSESS FOR EACH USE
Likelihood of error Consequence if it occurs Whether it would be detected What review exists
WHAT TO DO ABOUT HIGH-RISK USES
Human review, always Sampling and monitoring Clear accountability A way to stop
WHAT TO DOCUMENT
Your assessment and what you decided.
If something goes wrong, that record matters.
WHAT TO REVIEW
When usage changes, when tools change, and annually.
