PORRIDGEWEB — WEBSITE RISK PREPARATION WORKSHEET
Original blank template · Version 1 · 17 October 2026
Source: https://porridgeweb.com/digital-safety/website-risk-assessment/
General preparation aid, not legal advice, a prescribed government form or certification.
You may use this blank worksheet internally in your business. Keep completed records private.

SERVICE SUMMARY
Business / service:
Website:
Purpose and intended audience:
Assessment owner and reviewer:
Date / version / scope:
Pages or systems reviewed:
Not reviewed and why:
Applicable legal requirements confirmed by / date:

FEATURE INVENTORY
Feature / supplier / users / information handled / access / retention / evidence:
Include forms, accounts, bookings, payments, uploads, comments, messages, AI and recommendations.
People potentially affected, including children:
Known facts:
Unknowns and questions:

RISK ENTRY (copy this section for each risk)
Reference and date:
Feature and possible harmful scenario:
Who could be affected and how:
Evidence reference and observation date:
Evidence type: observed / owner-reported / assumption / unverified
Existing safeguard:
Evidence the safeguard works:
Likelihood and reasons:
Impact and reasons:
Priority and reasons (not an automated compliance score):
Action required:
Responsible person and target date:
Remaining risk and uncertainty:
Review or specialist advice required:
Decision / reviewer / date:

REPORTING AND RESPONSE
How users report harm:
Who responds and who covers absence:
How serious issues are escalated:
When the process was tested:

REVIEW RECORD
Next review date:
Triggers: changed features, suppliers, audience, incidents, evidence or law
What changed since the previous review:
Who approved the record and when:
Where records are stored and who has access:
Retention/deletion basis (confirm any applicable legal duties):

Never add passwords, payment-card details, identity documents or unnecessary personal information.
No completed answers are sent to PorridgeWeb by downloading this file.