Original fictional incident cards. Not observed events. No system was changed.

Worked cards
Card P
Asset: draft club budget
Event: a passerby reads the budget on an unattended signed-in screen
Direct harm: confidentiality
Control on this card: lock the screen before leaving
Limit: locking now does not hide a copy that was already made

Card Q
Asset: meeting time
Event: the time changes from Tuesday to Friday and the edit log is empty
Direct harm: integrity
Control on this card: allow changes only from named editors, and keep the edit log
Limit: an edit log does not repair a time that was already wrong when the log started

Card R
Asset: sign-in page
Event: the page does not load for anyone who is allowed to use it
Direct harm: availability
Control on this card: keep a tested spare way to reach the page
Limit: a spare copy does not decide who may read the budget

One event can touch more than one goal. Name the direct harm first.

Activity cards. The goals are not filled in.
Card K
Asset: the only copy of the practice schedule
Event: the file is deleted, and members who are allowed to read it cannot open it
Control that matches this event: a tested spare copy
What that control does not do: it does not stop a passerby from reading a different file

Card L
Asset: a private comment
Event: every signed-in member can read the comment
Control that matches this event: restrict reading to the people named on the comment

Card M
Asset: a practice score
Event: the score changes from 3 to 9 and the edit log is empty
Control that matches this event: accept changes only from named editors

Check: card K is availability. Card L is confidentiality.
Card M is the same kind of change as worked card Q.