Risk Register

Lists known risks UAC has accepted for now, with the controls involved.

Download PDF

Document information

Item Value Meaning
Unit UAC Unified Admission Coordination Unit
Area GEN General: applies to the whole document set
Document type REC Record: logs, registers, inventories, test results
Number 05 Sequence within the same unit, area and type
Version 0.2 Draft
Classification Confidential UAC technical staff and named approvers (by role). Need-to-know; printed copies kept locked
Owner Eng. Ahmad Abd Al-Hadi, UAC Responsible for this document
Next review Set at first approval, every 6 months after Every 6 months, and straight after any incident or major change that touches the document
JNCSF controls 319, 320, 538–543 To be set
Document code UAC-GEN-REC-05 Unit-Area-Type-Number. Never changes; the version is tracked separately

Approval

Role Name · Position Decision Date & time Signature Signed file reference
Prepared by Eng. Ahmad Abd Al-Hadi · Computer Engineer
Reviewed by
Approved by

Signatures apply to a frozen PDF of one exact version. Decision is Approved or Returned with comments. Signed file reference is the version plus the SHA-256 fingerprint of the signed PDF.

Revision history

Version Date Change By
0.1 20 Oct 2026 New document. Eng. Ahmad Abd Al-Hadi
0.2 20 Oct 2026 Added summary, owner and purpose Eng. Ahmad Abd Al-Hadi

Purpose & scope

Records known weaknesses and the decision taken on each, so they are reviewed rather than forgotten.

Risks

No. Risk Controls Decision Added
1 All servers, storage and backups are in one room 23, 218–222 Known risk, accepted for now 20 Oct 2026
2 No vulnerability scanning; tools not permitted by the ministry 307–312 Known risk, accepted for now 20 Oct 2026
3 Storage pools not encrypted (performance choice) 382, 367 Known risk, accepted for now 20 Oct 2026
4 Management, storage and iSCSI on the same network as ministry users 346–348, 387 Known risk, accepted for now 20 Oct 2026