Updated Risk Register Entries PMM findings that reveal new risks or change the assessment of existing risks trigger risk register updates. Each update documents the originating PMM finding, the risk reassessment, any new or modified mitigations, and the residual risk acceptance. The risk register is a living document that evolves with the system’s operational experience. Updated risk register entries demonstrate that the organisation’s risk management is responsive to production evidence, not static from the pre-deployment assessment. This responsiveness is a mitigating factor under Article 99(7). Key outputs

• PMM-triggered risk register updates
• Originating finding linked to risk reassessment
• Responsive risk management as mitigating factor
• Module 6 and Module 12 AISDP evidence