Section 06 — Risk Analysis
The Risk Heat Map
Ten risk categories, each self-assessed on likelihood and impact (1–5 on each axis, giving a score out of 25). Two risks sit at the maximum score — entity ambiguity and the financial evidence gap — and they are the direct basis for the staged, evidence-led investment sequence this proposal sets out. Select any marker to inspect its mitigation.
The risk scores on this page are the promoter’s own self-assessment — likelihood × impact, 1–5 on each axis — not a third-party or actuarial rating. Every score here is presented on that basis.
Risk categories assessed
10
Likelihood × Impact, 1–5 each
Risks at the maximum score (25)
2
Entity ambiguity; financial evidence gap
Risks scoring 20 or higher
6
Rows 1–4, 6 and 7 of the register below (row 5 scores 16)
Counted from the risk register below: rows 1–4 and 6–7 score 25, 25, 20, 20, 20, 20 — two at the maximum and four more at 20, six at or near it. Row 5 scores 16 and does not qualify.
Likelihood × Impact (10 risks)
Likelihood →
Selected Risk
Entity ambiguity
Score 25 — Likelihood 5 × Impact 5
Mitigation (prospective)
Obtain certified registry documents, cap table, IP assignments
All Risks
Risk Register
All Ten Risks
1. Entity ambiguity
Likelihood 5 · Impact 5
Mitigation (prospective)
Obtain certified registry documents, cap table, IP assignments
2. Financial evidence gap
Likelihood 5 · Impact 5
Mitigation (prospective)
Commission audited statements and settlement reconciliation
3. Privacy/consent failure
Likelihood 4 · Impact 5
Mitigation (prospective)
Data map, purpose review, consent remediation
4. Cybersecurity/fraud
Likelihood 4 · Impact 5
Mitigation (prospective)
Secure SDLC, MFA, WAF, bot defence
5. Pricing non-compliance
Likelihood 4 · Impact 4
Mitigation (prospective)
All-in pricing engine and legal review
6. Weak inventory
Likelihood 4 · Impact 5
Mitigation (prospective)
Partner-led pilot, minimum inventory commitments
7. CAC exceeds contribution
Likelihood 4 · Impact 5
Mitigation (prospective)
Channel caps, incrementality tests, referral loops
8. Scalability failure
Likelihood 3 · Impact 5
Mitigation (prospective)
Load tests, queues, rate limits, recovery drills
9. Immigration disruption
Likelihood 3 · Impact 4
Mitigation (prospective)
Local sponsor, lead times, cancellation cover
10. Competitive retaliation
Likelihood 4 · Impact 4
Mitigation (prospective)
Niche inventory, non-exclusive partnerships
Row scores are self-assessed ratings with the arithmetic recomputed (likelihood × impact). Mitigation wording (“certified,” “audited,” “secure,” “committed”) describes the documents and controls each mitigation would put in place, not documents that already exist.
Registry Findings
What the Public Registers Show Behind the Two Maximum-Score Risks
Row 1 — entity ambiguity (25) — is not hypothetical; it is documented in the public registers.
Public register searches — a lookup rather than full ownership due diligence. ABN Lookup returns “No matching names found” for Ticketalay — no entity of that name is registered in Australia — and no active ABN is named exactly “AB Entertainment”. The registrant of ticketalay.com.au is ABN 91 819 759 805 — V DESHPANDE & A KADAM, a two-person family partnership trading as A&B ENTERTAINMENTS (VIC 3030, active since 07 Nov 2022), not registered for GST — not any Ticketalay or PAC Theatre Entertainment entity. The domain’s auDA RDAP record carries status “server renew prohibited” — “Not Currently Eligible For Renewal” (last changed 2026-08-16): the proof market’s named domain may lapse. This is a time-critical adverse fact on the G0 critical path — the ownership memorandum must resolve the renewal flag and name the actual legal counterparty before any agreement is signed.
Row 2 — financial evidence gap (25) — the engagement reality behind the install band.
The 100,000+ Google Play downloads attach to the India-only product and count cumulative installs, not users or buyers. The engagement actually visible in public: 386 Google Play ratings at 3.36 stars and 45 App Store ratings at 2.62 stars, both on India storefronts. No audited statements, settlement records or first-party exports are on file; the install band is the only platform-metered figure in evidence, and it is not financial evidence.
Sources: ABN Lookup active search (abr.business.gov.au); the ABN 91 819 759 805 detail record; auDA RDAP via rdap.org/domain/ticketalay.com.au; the Google Play listing; and the Apple lookup API.
Priority Actions
Top Five Mitigations
Ranked by the promoter’s own assessment of urgency and leverage across the programme.
| # | Risk | Mitigation |
|---|---|---|
| 1 | Legal-entity and ownership ambiguity | Obtain certified registry documents, cap table and IP assignments |
| 2 | Insufficient first-party financial evidence | Commission audited statements and settlement reconciliation |
| 3 | Data privacy or consent failure | Complete data map, purpose review and consent remediation |
| 4 | Weak promoter or venue inventory | Secure minimum three contracted pilot events |
| 5 | Customer acquisition costs exceed contribution | Set channel caps, measure incrementality, build referral loops |
Sequencing
Why Foundation Work Leads the Sequence
The two highest risks — entity ambiguity and financial evidence, both scored 25 — cannot be mitigated by product design or marketing spend, only by documentary evidence. This is why the foundation work (legal-entity confirmation, audited financials, signed pilot agreements) leads the programme sequence, ahead of any market-entry or platform spend.
Self-assessment, and an accurate description of the register above.