Risk Registers
These registers are the source for the Risk Management pack in the Report Center — Enterprise Risk, Cybersecurity & Operational, Business Continuity, Key Person & Succession and Risk Appetite. Nothing else writes them.
Systems & Recovery Objectives
System / Process Criticality RTO (hrs) RPO (hrs) Owner Last Tested Result Notes
QuickBooks Online (three companies)
The books for Northwind Family LP, Harbor LP and Northwind Credit LLC.
critical 8 24 Casey Lin 06/11/2026
120d ago
pass Vendor-hosted; weekly export of the general ledger kept in the document library.
Document library (SharePoint)
Deal documents, statements, K-1s and wire packets.
critical 8 1 Jordan Park 07/06/2026
95d ago
pass Versioning on; retention policy 7 years; restore of a deleted folder rehearsed.
Banking portals (two banks)
Wires, ACH and balance reporting.
critical 2 0 Casey Lin 08/10/2026
60d ago
partial Secondary approver tokens were out of date at the last test; re-issued.
Family Office platform (this app)
Investments, entities, treasury, tax and reporting. Hosted; nightly database backup to object storage plus an off-site immutable copy.
critical 4 1 Jordan Park 08/30/2026
40d ago
pass Full restore rehearsed on a throwaway server from the off-site copy.
Email and calendar (Microsoft 365)
All sponsor correspondence and the mailbox the Documents app reads.
high 8 1 Jordan Park 03/23/2026
200d ago
pass —
Tax workpapers (CPA portal)
Returns, extensions and K-1 packages exchanged with the preparer.
medium 72 24 Casey Lin Never tested not tested —
Documents app (AI mailbox)
Files inbound statements and notices into the library and this platform.
medium 48 24 Jordan Park 08/30/2026
40d ago
pass If it is down, statements are filed by hand from the mailbox; nothing is lost.
Office network and laptops
Four laptops, MFA on everything, no local data of record.
low 24 24 Jordan Park 05/12/2026
150d ago
pass —
Static demo · synthetic data · read-only  ↩