lemented responses (a risk register); technology infrastructure investment planning 
documents; cost/benefit analyses; financial investment documents and portfolios; 
requirements for and examples of licenses, contracts, and asset management; evidence of 
revision based on risk. 
Discussion 
The repository should have a goal of maintaining an appropriate balance between risk and 
benefits, investment and return. 
3.5 
CONTRACTS, LICENSES, AND LIABILITIES 
3.5.1 The repository shall have and maintain appropr