@tdpauw I'm enjoying the read -- well written. It could easily be a book. I made it as far as the "But Compliance" section and have this feedback for you. Impact Mapping is more about mapping potential benefits to customers and prioritizing new features. In the context of risks, you might want to mention impact analysis, and risk matrices, for example: