• General agreement that the stepped approach to the risk assessment is nice
• Issue is that communities typically don't have enough people and just want to do their research
• As a low investment approach we could ask framing questions in the AARC Compendium E.g.
  • "Before you start, it's important to fully describe the goals of your community and to identify its primary assets. This may both impact your AAI design choices and optionally complete a full risk assessment." 
  • "Who is authorized to make decisions (legal or otherwise) for your community? Ensure you know this before starting as it will be important for defining several highly recommended policies."