Each tester has their own RAG rating on their testing service profile. In line with GDPR, the info is for ‘their eyes only’ and unavailable to Managers. However, the standard best practice is that the testers share the information so that managers know the risk attached to their testers and can record the information.