Module 1: System Description & Intended Purpose Module 1 identifies the system (name, version, provider, intended purpose, deployment context, affected persons, risk classification) and establishes the scope within which all other modules operate. It includes the version quad, the Statement of Business Intent, and the intended conditions of use. Module 1 is the first module populated during Phase 1 and the module updated last during decommission. Key outputs

• System identification and intended purpose
• Version quad and deployment context
• Scope boundary for all subsequent modules