Risk Management
Supplier risk register · Heat map · Mitigation tracking
Open Risks
13
requiring action
Critical
3
score ≥16 — escalate now
High Risk
6
score 9–15
Mitigated / Accepted
2
risks under control
Risk Heat Map
Open risks only · Hover for details
Risks by Type
All statuses
Critical & High Risks
Score ≥9 · Open only
Contractual
Contract expires 31 July 2026 with no signed renewal. RFP in progress but award not confirmed.
Cyber & Data
Data security audit failed Q1 2026. GDPR compliance gap identified — personal data not adequately protected.
Operational
Declining OTIF performance (74% June 26) with 4 open delivery issues. Customer SLAs at risk.
Financial
Unvalidated 44.8% price increase. Supplier invoicing at new rates without agreed contract amendment.
Reputational
If data breach occurs during exit period, company could face ICO investigation and reputational damage.
Single Source
No alternative supplier qualified for digital transformation programme. Single-source dependency creates supply continuity risk.
Contractual
Supplier disputing licence reduction plan. Potential claim for additional licence fees.
Operational
Fill rate dropping below 80% for warehouse operatives during peak periods. Business continuity risk.
Geographic
US tariff policy changes could increase hardware import costs.
Risk Register
13 entries
| Risk | Supplier | Type | Likelihood | Impact | Score | Status | Owner | Review Date |
|---|---|---|---|---|---|---|---|---|
Contract expires 31 July 2026 with no signed renewal. RFP in progress but award not confirmed. RFP issued June 26. Shortlisted 3 carriers. Award targeted August. Contingency: extend existing contract on 30-day notice. | DHL Supply Chain | Contractual | 4 — High | 5 — Critical | 20 | Open | Sarah Mitchell | 1 Jul 26 |
Data security audit failed Q1 2026. GDPR compliance gap identified — personal data not adequately protected. Exit plan in preparation. Do not extend contract beyond August 2026. Alternative vendor shortlisting underway. | Synapse Analytics Ltd | Cyber & Data | 4 — High | 5 — Critical | 20 | Open | Sarah Mitchell | 30 Jun 26 |
Declining OTIF performance (74% June 26) with 4 open delivery issues. Customer SLAs at risk. Performance improvement plan issued. Monthly scorecard review introduced. | DHL Supply Chain | Operational | 4 — High | 4 — High | 16 | Open | Sarah Mitchell | 15 Jul 26 |
Unvalidated 44.8% price increase. Supplier invoicing at new rates without agreed contract amendment. Dispute raised. Invoice held pending review. Contract review meeting scheduled. | TechCore Solutions | Financial | 5 — Critical | 3 — Medium | 15 | Open | Sarah Mitchell | 30 Jun 26 |
If data breach occurs during exit period, company could face ICO investigation and reputational damage. Legal team reviewing data processing agreement. Data minimisation exercise initiated. | Synapse Analytics Ltd | Reputational | 3 — Medium | 5 — Critical | 15 | Open | James Walklett | 30 Jun 26 |
No alternative supplier qualified for digital transformation programme. Single-source dependency creates supply continuity risk. Benchmarking 2 alternative consultancies. Target: second qualified supplier by Q4 2026. | Accenture | Single Source | 2 — Low | 5 — Critical | 10 | Open | James Walklett | 1 Sept 26 |
Supplier disputing licence reduction plan. Potential claim for additional licence fees. Escalated to SAP account director. Legal review of contract terms in progress. | SAP SE | Contractual | 3 — Medium | 3 — Medium | 9 | Open | Sarah Mitchell | 1 Jul 26 |
Fill rate dropping below 80% for warehouse operatives during peak periods. Business continuity risk. Introduce second agency as overflow supplier. Rate card negotiation in progress. | Adecco Group | Operational | 3 — Medium | 3 — Medium | 9 | Open | Sarah Mitchell | 15 Jul 26 |
US tariff policy changes could increase hardware import costs. Monitor tariff developments. Volume agreement includes price stability clause for 12 months. | Dell Technologies | Geographic | 3 — Medium | 3 — Medium | 9 | Open | Sarah Mitchell | 1 Sept 26 |
Single agency dependency for all above-the-line marketing. Contract expires December 2026. Relationship review at contract renewal Dec 26. Explore dual-agency model for FY27. | WPP Group | Single Source | 2 — Low | 4 — High | 8 | Open | James Walklett | 1 Oct 26 |
Residual maverick spend — some business units still purchasing from Amazon Business outside preferred agreement. P-card policy updated. Finance to block non-preferred supplier invoices from Jan 27. | Staples UK | Compliance | 4 — High | 2 — Low | 8 | Open | Tom Briggs | 1 Sept 26 |
SME supplier with limited financial reserves. No formal contract in place. Request latest accounts. Consider formal contract or consolidation into DHL. | Gleeson Logistics | Financial | 3 — Medium | 2 — Low | 6 | Open | Sarah Mitchell | 1 Aug 26 |
No contract in place for facilities services. Operating on verbal agreement. Formalise contract or transition spend to ISS agreement by Q3 2026. | Mitie Group | Contractual | 3 — Medium | 2 — Low | 6 | Open | Tom Briggs | 31 Jul 26 |