A Direct demand still requires a clear request and an explicit submission. The difference is that no mandatory analyst-response or assurance approval round is imposed before completion.
Prepare the request
Create the draft, document the information and scope, and attach relevant supporting material. Save the draft before selecting Submit for review from View status.
Pick up the demand
An authorised handler reviews the submitted request and uses the available intake actions. Accept it when the purpose and scope are sufficiently clear. Request information when the requester needs to clarify an assumption or supply missing material.
Once accepted and in progress, create the required risk assessments. An active workspace risk matrix is needed for new risks. Direct review retains role and record permissions; it does not make every demand editable by every member.
Record response decisions and follow-up work as appropriate, then complete the demand when the assessment is ready. Review outstanding risks and remediation separately.