Appendix B: Risk Register (Template)

Risk ID	Risk Description	Category	Likelihood	Impact	Mitigation Measures	Owner
R1	Data breach through smart contract exploit	Technological	High	Severe	Regular audits, code reviews, penetration testing	CTO
R2	Regulatory non-compliance in new region	Legal	Medium	High	Compliance checks, legal consultation	Compliance Officer
R3	System downtime during token transfer	Operational Risk	Medium	High	Redundant systems, failover protocols	Technical Risk Lead
R4	Data breach exposing user credentials	Cybersecurity Risk	High	High	Zero Trust, encryption, penetration testing	Security Team
R5	Non-compliance with GDPR/CCPA	Compliance Risk	Medium	High	Regular audits, data subject rights workflows	Compliance Officer
R6	Third-party data mishandling	Vendor Risk	Medium	Medium	Vendor assessments, contractual controls	Legal Advisor
R7	AI bias in property valuation algorithms	AI Ethics/Bias Risk	Low	High	Model validation, ethics board review	AI Governance Lead
R8	Insider threats	Operational Risk	Medium	High	Role-based access, logging, monitoring	Security Team
R9	DDoS attack on platform	Cybersecurity Risk	Medium	High	Web Application Firewall, rate limiting	Security Team
R10	Regulatory changes (e.g., new AI laws)	Compliance Risk	Medium	Medium	Monitoring, legal consultation	Legal Advisor