Reviewer access

Reviewers can record new risk assessments, adjust capability recommendations and review suggested links. Every change is stored with its reason, evidence and reviewer; reading the monitor needs no account.