Record rationale, approver, scope, compensating measures, expiry date and the evidence required for review. Apply this specifically to business-aligned risk decisions, accountability, resilience, investment evidence and stakeholder trust. Record the owner, evidence, decision and review date so another qualified person can verify the result.