Skip to main content

Risk Register

:::info Source Sourced from services/analytics-service/SERVICE_RISK_REGISTER.md in the documentation repo. :::

IDRiskSevImpactMitigationOwner
R-AN-01Cross-tenant query leakS1Data breachAuto-injected tenant filter; pre-execution validator; audit logAnalytics + Security
R-AN-02PII in hot tierS1GDPR violationHash at firehose; audit tier separate clusterAnalytics + Compliance
R-AN-03Ad-hoc SQL abuseS1DoS / leakTimeout; parser; tenant filter enforcedAnalytics + Security
R-AN-04AI-generated SQL destructiveS1Data deletionSchema-constrained gen; destructive ops blockedAnalytics + AI
R-AN-05At-risk predictor biasS1Discriminatory outcomesQuarterly eval; HITL; dispute processAnalytics + AI + Compliance
R-AN-06Ingestion lagS2Stale dashboardsFirehose autoscale; alertAnalytics + SRE
R-AN-07Storage cost runawayS3MarginRetention enforcement; per-tenant capsAnalytics + Finance
R-AN-08GDPR erasure slow on cold tierS2Regulator30-day SLA; rewrite Parquet in backgroundAnalytics + Compliance
R-AN-09Schema drift breaks projectionsS2Dashboards brokenSchema registry + CI gateAnalytics
R-AN-10Export quota abuseS3DoSPer-tenant rate + size limitsAnalytics
R-AN-11Cross-region residency violationS1RegulatorPer-region ClickHouse cluster; residency sagaAnalytics + Platform
R-AN-12Platform-admin cross-tenant abuseS2Insider threatAudit + 4-eyes; justification requiredPlatform + Security
R-AN-13ClickHouse node failureS2Query outageReplica failover; alertSRE + Analytics
R-AN-14AI budget exhaustionS3Insights blockedPer-tenant budget; fallback canned reportsAnalytics + AI
R-AN-15False anomaly floodS3Alert fatigueTune thresholds; dedup similar alertsAnalytics + AI