UF51
</>APIHEAL

COPY ALL TEXT

Click to copy entire risk assessment

SAVE TO FILES (iOS)

Downloads .txt file → then upload to Creative Scotland

RISK ASSESSMENT

National Lottery Open Fund for Organisations

Creative Scotland

PROJECT DETAILS

Project Title: UF51: Commissioning 30 Scottish Musicians for Ethical Streaming Infrastructure

Applicant Organisation: Universal Frequency51 CIC (SC870603)

Applicant Name: Brian Hughes (CIC Director)

Amount Requested: £100,000

Project Duration: 15 months (January 2025 - March 2026)

Project Summary: Commission 30 Scottish musicians to create healing frequency music. Research wellbeing impact. Pay artists fairly (£1,500 avg per commission). Build evidence base for music therapy.

TRAFFIC LIGHT SYSTEM GUIDANCE:

  • RED: Severe/highly likely risk requiring immediate action
  • AMBER: Moderate risk that must be addressed but is tolerable
  • GREEN: Low risk that can be monitored

For each risk: IDENTIFY the threat → ASSESS severity & probability → CONTROL through mitigation

RISK 1: Insufficient artist recruitment / engagement over 15 months

IDENTIFY:

The project depends on recruiting and retaining 30 Scottish musicians over a 15-month period. If we fail to recruit enough artists, or if artists drop out mid-project, we may not deliver the full scope of commissioned work.

ASSESS:

Severity: Relatively severe | Probability: Relatively unlikely

INITIAL TRAFFIC LIGHT: AMBER

CONTROL:

  • Partnerships with Musicians' Union Scotland and Scottish Music Centre
  • Fair payment model (£500-£1,500) significantly above industry standard
  • Staggered recruitment: initial 10 artists, then expand
  • 15-month timeline allows flexibility for artist scheduling
  • Local focus (Loch Lomond & West Dunbartonshire) manageable scope
  • Personal connections in Scottish music community
  • Flexible delivery windows in artist agreements

RESIDUAL RISK: GREEN

Fair payment, strong networks, and flexible timeline make artist engagement highly likely. Staggered approach allows adaptation.

RISK 2: Inconsistent quality or unsuitable music submissions

IDENTIFY:

Artists may submit work that doesn't meet healing frequency criteria, or quality may vary significantly. This could undermine research validity and therapeutic effectiveness.

ASSESS:

Severity: Relatively severe | Probability: Unlikely

INITIAL TRAFFIC LIGHT: AMBER

CONTROL:

  • Clear creative brief defining healing frequency requirements
  • Two-stage payment: 50% on commission, 50% on approved delivery
  • Peer review process: musicians provide feedback
  • Technical quality standards (lossless audio, production specs)
  • Project lead has music production background
  • Artists can resubmit if initial version doesn't meet criteria
  • £5,000 budget for professional audio engineering support
  • Quality over quantity - not all 30 commissions mandatory

RESIDUAL RISK: GREEN

Clear criteria, feedback loops, and quality control ensure suitable output. Flexibility prioritizes quality.

RISK 3: Research and wellbeing impact measurement proves invalid or unreliable

IDENTIFY:

£20,000 allocated for research. If methodology is flawed or we can't demonstrate measurable wellbeing outcomes, project's core premise remains unproven. Would undermine future funding and scalability.

ASSESS:

Severity: Severe (central to long-term value) | Probability: Unlikely (qualified researchers)

INITIAL TRAFFIC LIGHT: RED

CONTROL:

  • Partnership discussions with University of West Scotland psychology dept
  • Validated wellbeing scales (WEMWBS, GAD-7, PHQ-9)
  • Control group: healing frequencies vs standard music
  • University ethics approval
  • Sample size calculations (minimum 200 participants)
  • Mixed methods: quantitative scores + qualitative testimonials
  • Professional statistician for data analysis
  • Pilot phase (3 months) tests methodology, allows adjustment
  • Even if inconclusive, qualitative evidence remains valuable
  • Results written up for peer-review regardless of outcome

RESIDUAL RISK: AMBER

University partnership and robust methodology significantly reduce risk. Even mixed results generate valuable evidence. Pilot allows early adjustment. Tolerable risk given innovative nature.

RISK 4: Digital platform fails to scale for 30 artists and increased traffic

IDENTIFY:

Platform operational but untested at scale with 30 artists and thousands of users. Technical issues could prevent uploads or access. Downtime undermines trust.

ASSESS:

Severity: Relatively severe | Probability: Unlikely

INITIAL TRAFFIC LIGHT: AMBER

CONTROL:

  • Built on Base44 enterprise infrastructure (99.9% uptime)
  • Load testing before major artist onboarding
  • Gradual scaling: 10 artists initially, monitor, then expand
  • Manual backup: artists submit via WeTransfer/email if issues
  • Technical support from platform developer (BRO51)
  • Platform already handles auth, uploads, streaming successfully
  • CDN ensures fast, reliable global audio streaming
  • Automated daily database backups
  • £2,000 contingency for emergency technical fixes

RESIDUAL RISK: GREEN

Enterprise infrastructure, gradual scaling, and backup options make failure highly unlikely. Proven tech stack.

RISK 5: Budget overspend or cash flow issues preventing artist payments

IDENTIFY:

Fixed £100,000 budget over 15 months. Overspend on commissions, research, or operations could exhaust funds before completion. Delayed artist payment would damage trust and CIC reputation catastrophically.

ASSESS:

Severity: Severe (catastrophic reputation damage) | Probability: Unlikely (detailed controls)

INITIAL TRAFFIC LIGHT: RED

CONTROL:

  • Detailed budget: £45k artists, £20k research, £20k delivery, £8k marketing, £5k professional, £2k access
  • Payment schedule tracked in project management system
  • Monthly budget reviews by CIC director
  • Staggered commissioning - can pause if budget under pressure
  • 50/50 artist payment structure reduces upfront cash flow pressure
  • Grant funding received in stages matches spending to income
  • £2,000 accessibility budget acts as contingency
  • CIC director has social enterprise budget management experience
  • No staff salaries - all funds to project delivery
  • Regular financial reports to Creative Scotland per grant conditions

RESIDUAL RISK: AMBER

Detailed controls, staggered commissioning, and experienced management significantly reduce risk. Monthly reviews allow early intervention. Tolerable, manageable risk.

RISK 6: Data protection breach or artist rights infringement

IDENTIFY:

Project collects user wellbeing data and hosts copyrighted music from 30 artists. Data breach could expose sensitive information. Copyright disputes could arise. Legal action, reputational damage, project termination.

ASSESS:

Severity: Severe (legal/reputational critical) | Probability: Unlikely (robust protections)

INITIAL TRAFFIC LIGHT: RED

CONTROL:

  • GDPR-compliant platform with encrypted data storage
  • Privacy policy explains data collection, storage, usage
  • User consent required before wellbeing data collection
  • Research data anonymized before analysis
  • Artist contracts: artists retain copyright, CIC gets non-exclusive license
  • Music licensing tracked per artist with clear royalty-free arrangements
  • Minimal personal data stored (email, name only)
  • No payment card data on platform (Stripe/Revolut handle)
  • Regular backups prevent data loss
  • Cyber insurance explored as part of CIC business insurance
  • Base44 platform includes security monitoring and DDoS protection
  • Artist contracts reviewed by solicitor (£5k professional services budget)

RESIDUAL RISK: AMBER

Strong technical protections, legal contracts, GDPR compliance significantly reduce risk. Cyber insurance provides financial backstop. Tolerable and well-managed.

RISK 7: Insufficient community engagement reduces reach and impact

IDENTIFY:

If communities/users aren't aware or don't engage with healing frequencies, wellbeing impact limited. Low user numbers undermine research validity and value for money. Risk becoming artistic output with minimal therapeutic use.

ASSESS:

Severity: Relatively severe | Probability: Relatively unlikely

INITIAL TRAFFIC LIGHT: AMBER

CONTROL:

  • £8,000 dedicated marketing and audience development budget
  • Multi-channel: social media, local press, community partnerships
  • Partnership with Friends of Loch Lomond for outreach
  • Posters in GP surgeries, community centres, libraries (West Dunbartonshire)
  • Free access removes financial barrier
  • User-friendly platform (no technical skills required)
  • Artist launch events: live performances promote work
  • Schools outreach: music education integration
  • Continuous evaluation allows marketing strategy adaptation
  • Local radio interviews (Loch Lomond Radio, West FM)

RESIDUAL RISK: GREEN

Substantial marketing budget, multi-channel strategy, and free access ensure strong engagement. Low engagement unlikely.

RISK 8: COVID-19 or public health restrictions disrupt delivery

IDENTIFY:

While restrictions no longer in place, future outbreaks or health emergencies could prevent artists accessing studios or make collaboration/events difficult. Could delay commissions or reduce community engagement.

ASSESS:

Severity: Relatively severe | Probability: Relatively unlikely

INITIAL TRAFFIC LIGHT: AMBER

CONTROL:

  • 15-month timeline allows flexibility for delays
  • Remote collaboration possible: home recording and digital upload
  • No requirement for in-person events - functions entirely online
  • Staggered artist commissioning - delays don't block others
  • Grant extension possible if emergency significantly disrupts
  • Artists work at own pace within timeframe
  • Platform designed for fully remote access
  • Budget includes £2k contingency for emergency adjustments
  • Wellbeing research entirely online via digital surveys

RESIDUAL RISK: GREEN

Flexible, digital-first design means public health restrictions have minimal impact. Remote capability and extended timeline make this tolerable and unlikely.

OVERALL RISK ASSESSMENT SUMMARY

BEFORE MITIGATION:

  • 🔴 RED: 3 risks
  • 🟡 AMBER: 5 risks
  • 🟢 GREEN: 0 risks

AFTER MITIGATION:

  • 🔴 RED: 0 risks (none unmanageable)
  • 🟡 AMBER: 3 risks (tolerable, managed)
  • 🟢 GREEN: 5 risks (low, monitored)

✅ NO UNMANAGEABLE RED RISKS REMAIN

All critical risks have robust controls. Three AMBER risks (research validity, budget management, data protection) are tolerable and actively managed.

KEY RISK MANAGEMENT STRENGTHS:

  • Detailed financial controls prevent budget overrun
  • University partnership ensures research credibility
  • Enterprise platform infrastructure guarantees reliability
  • Legal contracts protect artist rights and user data
  • Staggered commissioning allows adaptive project management
  • Local partnerships ensure community engagement
  • Flexible timeline accommodates unforeseen delays

This project represents a well-managed, ambitious but achievable initiative that justifies the £100,000 investment.

Signed:

Brian Hughes

(CIC Director)

Date:

13 October 2026

Company: Universal Frequency51 CIC (SC870603)
Project: UF51: Commissioning 30 Scottish Musicians for Ethical Streaming Infrastructure
Grant: Creative Scotland National Lottery Open Fund for Organisations (£100,000)