How to prepare a breach register properly — operating purpose, assessment workflow, required fields, evidence links and review discipline that hold up.