Where: /app/aims/competence

For each high-risk system in your sample, establish that the people accountable for it hold current, dated competence records.

What to establish

• Accountabilities are named against systems, not left generic.
• Records are dated, and expiry is visible.
• Gaps are open, owned, and have a route to closure.

What would be a finding

A high-risk system whose accountable person holds no record; expired records that are not raised as gaps; or competence asserted with no evidence of how it was determined.

This surface depends on a deployment flag. Where it is switched off the page says so rather than rendering an empty register — an empty page with no explanation would be a defect, so tell us if you see one.