Schedule 1 – Guidance on Technology Governance and Risk Assessment Frameworks Introduction A. Risk Category 1: Organisational B. Risk Category 2: Technical C. Risk Category 3: Detection and Response D. Risk Category 4: Customer VAs E. Risk Category 5: Digital Operational Resilience