Blockchain Solution Risk Assessment Considerations Amitabh SrivastavAS_d78df814-8111-11ea-a515-db472783ea00_d78df99a-8111-11ea-a515-db472783ea00To evaluate the risk associated with using blockchain solutions_d78dfa9e-8111-11ea-a515-db472783ea00GovernanceAddress the governance requirements_d78dfb98-8111-11ea-a515-db472783ea001Records ManagementManage records effectively_d78dfc74-8111-11ea-a515-db472783ea001.11.1.1Mission Critical_7e34e5d6-89c0-11ea-8237-e671c6e29406PLACEHOLDER_1Determine if you have electronic records of the mission-critical digital assets.Yes/No[To be determined]1.1.2Large Volume_7e34ea72-89c0-11ea-8237-e671c6e29406PLACEHOLDER_2Determine if you have a large volume of digital content (structure and unstructured) that needs to be managed.Yes/No[To be determined]1.1.3Classification_7e34ee0a-89c0-11ea-8237-e671c6e29406PLACEHOLDER_3Determine if you need to classify your digital assets that will be stored on the blockchain.Yes/No[To be determined]1.1.4Classifying_7e34ef4a-89c0-11ea-8237-e671c6e29406PLACEHOLDER_4Determine if you currently classify your digital assets.Yes/No[To be determined]1.1.5Preservation_7e34f0da-89c0-11ea-8237-e671c6e29406PLACEHOLDER_5Determine if you require long-term preservation of your digital assets.Yes/No[To be determined]1.1.6Monetization_7e34f224-89c0-11ea-8237-e671c6e29406PLACEHOLDER_6Determine if you plan to monetize your digital assets such as a subscription-based service.Yes/No[To be determined]1.1.7Validation_7e34f35a-89c0-11ea-8237-e671c6e29406PLACEHOLDER_7Determine if you need to validate information from off chain sources before hashing the information to the blockchain.Yes/No[To be determined]Compliance & ReportingAddress compliance and reporting requirements_d78dfe4a-8111-11ea-a515-db472783ea001.21.2.1Authoritative Source_7e34f49a-89c0-11ea-8237-e671c6e29406PLACEHOLDER_8Determine if you have an authoritative source for your digital assets.Yes/No[To be determined]1.2.2Audit Requirements_143bf86a-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_9Determine if you have specific blockchain audit requirements for the transaction records in order to be compliant.Yes/No[To be determined]1.2.3Third-Party Compliance_143bfacc-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_10Determine if your third parties need to comply with the same or similar regulations.Yes/No[To be determined]Senior Management OversightProvide oversight_d78dff44-8111-11ea-a515-db472783ea001.3Senior Managers1.3.1Knowledge & Experience_7e34f5f8-89c0-11ea-8237-e671c6e29406PLACEHOLDER_11Determine if your board have knowledge and experience to provide pro-active oversight for the DLT initiative using a blockchain solution.Yes/No[To be determined]1.3.2Expertise_143bfc52-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_12Determine if your board have access to expert opinions to provide information for the DTL using a blockchain solution.Yes/No[To be determined]Business Impact Assessment (BIA)Assess business impacts_d78e0034-8111-11ea-a515-db472783ea001.41.4.1All Content_7e34f756-89c0-11ea-8237-e671c6e29406PLACEHOLDER_13Determine if you need to store all of you digital content or just the mission-critical digital assets on the blockchain.Yes/No[To be determined]1.4.2RTO & RPO_143bfde2-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_14Determine if you have specific recovery time objectives (RTO) and recovery point objectives (RPO) for the blockchain infrastructure.Yes/No[To be determined]1.4.3Buy-In_143bff36-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_15Determine if you have "buy-in" from board and / or management level committees for the BIA report.Yes/No[To be determined]Operational StructureDetermine operational structure_d78e011a-8111-11ea-a515-db472783ea002Transaction FeesConsider transaction costs_d78e0214-8111-11ea-a515-db472783ea002.12.1.1Cost Reduction_7e34f8c8-89c0-11ea-8237-e671c6e29406PLACEHOLDER_16Determine if you want to reduce your transaction cost but not use third parties.Yes/No[To be determined]2.1.2Transaction Reduction_143c0080-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_17Determine if you need to reduce your unit transaction.Yes/No[To be determined]LiquidityConsider issues related to financial liquidity_d78e0318-8111-11ea-a515-db472783ea002.22.2.1Dispute Resolution Plan_7e34fa4e-89c0-11ea-8237-e671c6e29406PLACEHOLDER_18Determine if you have a plan to resolve disputes and counterparty risks without intermediaries to take on liquidity risks.Yes/No[To be determined]2.2.2Transaction Dispute Resolution Plan_143c024c-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_19Determine if you have a plan to resolve financial transaction disputes that cross jurisdictional boundaries without intermediaries.Yes/No[To be determined]Business ContinuityAddress business continuity issues_d78e0412-8111-11ea-a515-db472783ea002.32.3.1Critical Assets_143c0422-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_20Determine if you manage digital assets that are critical to your operations.Yes/No[To be determined]Operational Resiliency_d78e05a2-8111-11ea-a515-db472783ea002.42.4.1Security Breach Continuity_7e34fd64-89c0-11ea-8237-e671c6e29406PLACEHOLDER_21Determine if you have specific requirements to confirm that the blockchain infrastructure will continue to operate after a security breach, other specific types of failures.Yes/No[To be determined]2.4.2Volume Spikes_143c0594-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_22Determine if you have specific projections or forecasts for the increase or sudden spikes in transaction volumes, etc..Yes/No[To be determined]IntermediariesConsider issues related to interaction with intermediaries_d78e06a6-8111-11ea-a515-db472783ea002.52.5.1Middlemen_7e34ff26-89c0-11ea-8237-e671c6e29406PLACEHOLDER_23Determine if you work with third parties that act as "middlemen" to complete the transaction.Yes/No[To be determined]2.5.2Partners_143c0706-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_24Determine if you partner with other organizations to run your business.Yes/No[To be determined]2.5.3Third Parties_143c0878-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_25Determine if you need to work with a trusted third party to complete the transaction.Yes/No[To be determined]2.5.4Multiple Parties_143c09ea-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_26Determine if you need multiple third parties to verify and validate transactions.Yes/No[To be determined]2.5.5Anonymity_143c0b66-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_27Determine if you need one or more the third parties to be anonymous to one another.Yes/No[To be determined]Management CommitteesConsider the adequacy of management committees_d78e0872-8111-11ea-a515-db472783ea002.62.6.1Board Support_7e3500d4-89c0-11ea-8237-e671c6e29406PLACEHOLDER_28Determine if your management committee has board-level support for the DTL using a blockchain solution.Yes/No[To be determined]2.6.2Senior Participation_143c0ce2-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_29Determine if the management committee has senior-level participation to monitor and manage pro-actively the risks and issues.Yes/No[To be determined]PrivacyAddress privacy issues_d78e0994-8111-11ea-a515-db472783ea002.72.7.1PIA Buy-In_7e35028c-89c0-11ea-8237-e671c6e29406PLACEHOLDER_30Determine if you have "buy-in" from board and / or management level committees for the privacy impact assessment of sensitive information that will be stored on the blockchain.Yes/No[To be determined]2.7.2Privacy Plan_143c0fb2-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_31Determine if you have a plan to address privacy issues when using a permissionless blockchain.Yes/No[To be determined]Smart ContractsConsider using smart contracts_d78e0aa2-8111-11ea-a515-db472783ea002.82.8.1Transaction Ordering_7e350476-89c0-11ea-8237-e671c6e29406PLACEHOLDER_32Determine if you need to maintain the order in which buy and sell transaction were completed.Yes/No[To be determined]2.8.2Legal Limitations_143c11a6-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_33Determine if you know the legal limits of using smart contracts in the jurisdictions that you are operating within.Yes/No[To be determined]Legal LiabilityConsider legal liabilities_d78e0bb0-8111-11ea-a515-db472783ea002.92.9.1Transparency_7e350638-89c0-11ea-8237-e671c6e29406PLACEHOLDER_34Determine if you need to provide transparency to your transaction information and digital content.Yes/No[To be determined]2.9.2Liabilities_143c1354-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_35Determine if you know the liabilities of using permissioned and / or permissionless blockchains in the jurisdictions that you are operating within.Yes/No[To be determined]2.9.3Insurance_143c15e8-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_36Determine if you need liability insurance that is specific to using a blockchain solution.Yes/No[To be determined]Contract EnforcementConsider contract enforcement issues_d78e0d22-8111-11ea-a515-db472783ea002.102.10.1Contract Management_7e350818-89c0-11ea-8237-e671c6e29406PLACEHOLDER_37Determine if you need to manage contracts in the blockchain or off chain in order to stay compliant.Yes/No[To be determined]2.10.2Jurisdictional Limits_143c17be-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_38Determine if you know the jurisdictional limits when managing contract on the blockchain.Yes/No[To be determined]Threat Risk Assessment (TRA)Address threats and risks_d78e0e30-8111-11ea-a515-db472783ea002.112.11.1Risk Prioritization_7e350a34-89c0-11ea-8237-e671c6e29406PLACEHOLDER_39Determine if you have a prioritized list of quantitative and qualitative risks and corresponding risk management strategies.Yes/No[To be determined]2.11.2TRA Buy-In_143c1994-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_40Determine if you have "buy-in" from board and / or management level committee for the TRA report.Yes/No[To be determined]2.11.3Crisis Management Plan_143c1b4c-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_41Determine if you have a crisis management plan to respond to failures when using the blockchain solution.Yes/No[To be determined]Blockchain ArchitectureDetermine the blockchain architecture_d78e0f3e-8111-11ea-a515-db472783ea003Permissioned versus permissionlessDetermine whether to use a permissioned or permisisonless blockchain_d78e104c-8111-11ea-a515-db472783ea003.13.1.1Blockchain Type_7e350c28-89c0-11ea-8237-e671c6e29406PLACEHOLDER_42Determine if you need to use a permissionless or permissioned blockchain solution.Permissionless/Permissioned[To be determined]3.1.2Scale-Up Capacity_143c1d04-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_43Determine if the permissionless blockchain solution has the capacity to "scale up" as transaction volumes increase.Yes/No[To be determined]On-premise versus cloud-basedDetermine whether to use an on-premise or cloud-based blockchain_d78e116e-8111-11ea-a515-db472783ea003.23.2.1Resources, Skills & Experience_7e350e30-89c0-11ea-8237-e671c6e29406PLACEHOLDER_44Determine if you have resources, skills, and experience to manage on-premise blockchain infrastructure.Yes/No[To be determined]3.2.2Infrastructure_143c1ec6-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_45Determine if you need to have the blockchain infrastructure on-premise, cloud-based, or hybrid.Yes/No[To be determined]BaaS versus ProprietaryDetermine whether to use Blockchain as a Service (BaaS) or a proprietary blockchain_d78e13a8-8111-11ea-a515-db472783ea003.33.3.1Internal Use_7e3510b0-89c0-11ea-8237-e671c6e29406PLACEHOLDER_46Determine if you need an enterprise-wide blockchain only for internal use.Yes/No[To be determined]3.3.2Use Cases_143c2092-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_47Determine if you have one more or use cases that fit a BasS solution.Yes/No[To be determined]Consensus ProtocolDetermine which consensus protocol to use_d78e14de-8111-11ea-a515-db472783ea003.43.4.1Consensus Mechanism_7e3512cc-89c0-11ea-8237-e671c6e29406PLACEHOLDER_48Determine if you know which consensus mechanism is appropriate for the blockchain solution.Yes/No[To be determined]3.4.2Transaction Volume_143c2268-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_49Determine if you need to consider whether a Proof of Work (PoW) or Delegated Proof of Stake (DPoS) consensus algorithm can handle large volumes of transactions.Yes/No[To be determined]3.4.3Delays & Prevention_143c2466-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_50Determine if you need to consider a whether DPoS consensus algorithm can delay or prevent completing the transfer for value.Yes/No[To be determined]Mining ArchitectureAddress the mining architecture_d78e15f6-8111-11ea-a515-db472783ea003.53.5.1Volume Increases_7e3514fc-89c0-11ea-8237-e671c6e29406PLACEHOLDER_51Determine if you expect the volume of digital content to increase rapidly. Yes/No[To be determined]3.5.2High Volumes_143c2650-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_52Determine if you need to support a high volume of transaction.Yes/No[To be determined]3.5.3Hybrid Architecture_143c283a-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_53Determine if you require hybrid architecture where some nodes are off-premise.Yes/No[To be determined]3.5.4Distribution_143c2a24-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_54Determine if you require nodes to be distributed, but not decentralized.Yes/No[To be determined]Legislation & RegulationsAddress the applicable laws and regulations_d78e1704-8111-11ea-a515-db472783ea004Customer InformationProtect customer information_d78e1808-8111-11ea-a515-db472783ea004.14.1.1Commercial Sensitivity_7e35177c-89c0-11ea-8237-e671c6e29406PLACEHOLDER_55Determine if you need to manage and secure commercially sensitive digital information on the blockchain platform.Yes/No[To be determined]Personal InformationProtect personal information_d78e1916-8111-11ea-a515-db472783ea004.24.2.1PII_7e3519c0-89c0-11ea-8237-e671c6e29406PLACEHOLDER_56Determine if you need manage and secure personally identifiable information (PII) on the blockchain platform.Yes/No[To be determined]4.2.2Removal_143c2c0e-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_57Determine if you need to remove information from the blockchain to comply with legislation and regulations.Yes/No[To be determined]Health InformationProtect health-related information_d78e1a38-8111-11ea-a515-db472783ea004.34.3.1PHI_7e351c18-89c0-11ea-8237-e671c6e29406PLACEHOLDER_58Determine if you need to manage and secure personal health information (PHI) on the blockchain platform.Yes/No[To be determined]Data ResidencyConsider issues related to where the data resides_d78e1b5a-8111-11ea-a515-db472783ea004.44.4.1Jurisdictional Constraints_7e351eca-89c0-11ea-8237-e671c6e29406PLACEHOLDER_59Determine if you know all of the jurisdictional constraints if you use BaaS.Yes/No[To be determined]4.4.2Residency Restrictions_143c3230-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_60Determine if you have specific data residency restrictions to consider if you use BaaS.Yes/No[To be determined]Anti-Money LaunderingGuard against money laundering_d78e1c7c-8111-11ea-a515-db472783ea004.54.5.1Suspicious Transactions_143c3456-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_61Determine if you know how to identify suspicious financial transactions when using a permissionless blockchain.Yes/No[To be determined]4.5.2KYC_143c3668-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_62Determine if you have a process in place to know your customer (KYC) when using a blockchain solution.Yes/No[To be determined]4.5.3AML_143c3974-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_63Determine if you have a plan to comply with anti-money laundering (AML) regulations when using a blockchain solution.Yes/No[To be determined]IT Operations and Network SecurityAddress IT operational and network security issues_d78e1d9e-8111-11ea-a515-db472783ea005Identity ManagementManage identities_d78e1ec0-8111-11ea-a515-db472783ea005.15.1.1Validation_7e3523b6-89c0-11ea-8237-e671c6e29406PLACEHOLDER_64Determine if you need to validate the participant's identity before confirming the transaction.Yes/No[To be determined]Key Management & Loss PreventionManage and prevent loss of keys _d78e1fd8-8111-11ea-a515-db472783ea005.25.2.1Processes & Tools_7e3526a4-89c0-11ea-8237-e671c6e29406PLACEHOLDER_65Determine if you have processes and technology tools that will ensure the security of private keys and wallets.Yes/No[To be determined]5.2.2Theft Processes_143c5f76-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_66Determine if you have processes to manage the loss or theft of private keys.Yes/No[To be determined]5.2.3Storage Plan_143c6228-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_67Determine if you have a plan to manage hot and cold storage of private keys.Yes/No[To be determined]Chain DefenseDefend the chain_d78e21b8-8111-11ea-a515-db472783ea005.35.3.1Response Plan_7e352b2c-89c0-11ea-8237-e671c6e29406PLACEHOLDER_68Determine if you have a response plan in the case when a hacker takes control of 51% of the notes on the network.Yes/No[To be determined]5.3.2SIEM_143c6516-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_69Determine if you have security information and event management (SIEM) software and hardware tools specifically to monitor the nodes on the blockchain network for vulnerabilities, intrusion detection, DDoS attacks, etc..Yes/No[To be determined]CryptographyEvaluate the cryptography protocols_d78e22f8-8111-11ea-a515-db472783ea005.45.4.1Protocols_7e352de8-89c0-11ea-8237-e671c6e29406PLACEHOLDER_70Determine if you have the requirements to evaluate the different cryptography protocols used by the nodes on the network to arrive at a consensus to update the DLT.Yes/No[To be determined]5.4.2Consensus Mechanisms_143c675a-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_71Determine if you know which consensus mechanism is appropriate for the blockchain solution.Yes/No[To be determined]TokenizationEvaluate the tokens that might be used_d78e251e-8111-11ea-a515-db472783ea005.55.5.1Requirements_7e3530fe-89c0-11ea-8237-e671c6e29406PLACEHOLDER_72Determine if you have the requirements to evaluate the different tokens that might be used on the permissionless blockchain network.Yes/No[To be determined]5.5.2Values_143c699e-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_73Determine if you know the underlying value of item the token will represent.Yes/No[To be determined]5.5.3Consensus Mechanisms_143c6be2-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_74Determine if you know which consensus mechanism is appropriate for the blockchain solution.Yes/No[To be determined]Data ManagementManage the data_d78e2654-8111-11ea-a515-db472783ea005.65.6.1Database Encryption_7e3533ba-89c0-11ea-8237-e671c6e29406PLACEHOLDER_75Determine if you need to secure off chain data by encrypting it databases.Yes/No[To be determined]5.6.2Transmission Encryption_143c6e26-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_76Determine if you need to encrypt data when it is in transit to / form the blockchain to off chain storage.Yes/No[To be determined]Development & Operations (DevOps)Address DevOps requirements_d78e279e-8111-11ea-a515-db472783ea005.75.7.1SLAs_7e353694-89c0-11ea-8237-e671c6e29406PLACEHOLDER_77Determine if you have Service Level Agreements that specifically address the blockchain solution.Yes/No[To be determined]5.7.2Skills_143c707e-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_78Determine if you have skilled resources to develop and maintain and proprietary and on-premise blockchain solution.Yes/No[To be determined]Performance & ScalabilityConsider performance and scalability issues_d78e28f2-8111-11ea-a515-db472783ea005.85.8.1Scalability_7e3539dc-89c0-11ea-8237-e671c6e29406PLACEHOLDER_79Determine if you need the blockchain solution to scale up quickly during peak periods.Yes/No[To be determined]5.8.2Availability_143c72d6-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_80Determine if you require 24/7 availability even during a disaster recovery situation.Yes/No[To be determined]Off-Chain Information InteroperabilityConsider interoperability requirements_d78e2a46-8111-11ea-a515-db472783ea005.95.9.1Integration_7e353cca-89c0-11ea-8237-e671c6e29406PLACEHOLDER_81Determine if you need to manage and integrate digital information that is off chain.Yes/No[To be determined]5.9.2Regulatory Reports_143c7538-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_82Determine if you need provide regulatory reports regarding information that is stored the blockchain and off chain.Yes/No[To be determined]Project PlanningPlan the project_d78e2b9a-8111-11ea-a515-db472783ea006Business ObjectivesAlign with the strategic objectives_d78e2cd0-8111-11ea-a515-db472783ea006.16.1.1Strategic Alignment_7e353fc2-89c0-11ea-8237-e671c6e29406PLACEHOLDER_83Determine if the blockchain solution aligns with the strategic objectives.Yes/No[To be determined]Business CaseObtain buy-in for the business case_d78e2df2-8111-11ea-a515-db472783ea006.26.2.1Selection Option Buy-In_7e354378-89c0-11ea-8237-e671c6e29406PLACEHOLDER_84Determine if you have "buy-in" from all key stakeholders to approve the selection option.Yes/No[To be determined]6.2.2Business Case Buy-In_143c779a-9bde-11ea-bdd1-f9f13183ea00PLACEHOLDER_85Determine if you have "buy-in" from board and / or management level committees for the business case.Yes/No[To be determined]Project Governance FrameworkEngage pro-active participation from business team's management_d78e2ff0-8111-11ea-a515-db472783ea006.36.3.1Management Engagement_7e35468e-89c0-11ea-8237-e671c6e29406PLACEHOLDER_86Determine if the project steering committee has pro-active participation from business team's management.Yes/No[To be determined]Communications & Change ManagementDevelop a communications and change management plan_d78e3144-8111-11ea-a515-db472783ea006.46.4.1Change Management Plan_7e3549b8-89c0-11ea-8237-e671c6e29406PLACEHOLDER_87Determine if you need a communications and change management plan that is designed specifically for the blockchain solution that the board and / or management committee approved.Yes/No[To be determined]Scope ManagementObtain "buy-in" from board and / or management level committees_d78e3284-8111-11ea-a515-db472783ea006.56.5.1Scope Buy-In_7e354da0-89c0-11ea-8237-e671c6e29406PLACEHOLDER_88Determine if you have "buy-in" from board and / or management level committees for the scope of the blockchain solution.Yes/No[To be determined]Request for ProposalIssue an RFP_d78e361c-8111-11ea-a515-db472783ea006.66.6.1RFP_7e3550f2-89c0-11ea-8237-e671c6e29406PLACEHOLDER_89Determine if you need to issue an RFP to for the blockchain solution approved in the business case.Yes/No[To be determined]Business User Training & SupportDevelop a training plan and on-going support plan_d78e377a-8111-11ea-a515-db472783ea006.76.7.1Training & Support Plan_7e35543a-89c0-11ea-8237-e671c6e29406PLACEHOLDER_90Determine if you need to develop a training plan and on-going support plan that is designed specifically for the blockchain solution that the board and / or management committee approved.Yes/No[To be determined]Quality Management and TestingDevelop a quality management plan_d78e389c-8111-11ea-a515-db472783ea006.86.8.1Quality Management Plan_7e355872-89c0-11ea-8237-e671c6e29406PLACEHOLDER_91Determine if you need to develop a quality management plan that is designed specifically for the blockchain solution that the board and / or management committee approved.Yes/No[To be determined]_7e355be2-89c0-11ea-8237-e671c6e294062020-05-22https://stratml.us/carmel/iso/part2/BSRACwStyle.xml_7e355fac-89c0-11ea-8237-e671c6e29406OwenAmburOwen.Ambur@verizon.net