Risk Assessment: Open Questions and where to put

[daguag]

Taken from PlaningPhase:
cf. risk management in section "Design Phase"
[ ] which generic parts of RA can be put in Introduction.md / Foundations.md and which special part might be relevant for the specific phases
[ ]the criteria mentioned above are a good basis for the risk assessment, which shoule be revisited after every step in the development lifecycle
[ ] what means risk here for the developer? comment:"risk to endanger privacy of clients"
[ ] all processed data needs to be analysed to specify a risk level of potential malicious use of the data based on these risk levels special protection routines need to be applied (refer to standardized risk-levels)