- What was found
- R-1 “Vendor cannot provide data extract in the agreed format” (L4 × I5 = 20).
- Why it matters
- Risks at this level are, on the project’s own scoring, both likely and severe. They warrant explicit governance attention and contingency.
- Severity rationale
- Likelihood × impact of 20 or more on a 5 × 5 scale, as scored in the source register.
- Suggested next action
- Confirm each has an owner, a funded mitigation and a contingency, and that it is on the next steering committee agenda.
Evidence
States: L4 × I5
ID: R-1 | Type: Risk | Description: Vendor cannot provide data extract in the agreed format | Workstream: Data | Owner: P. Nair | Likelihood: 4 | Impact: 5 | Status: Open | Mitigation / Response: Weekly format review with vendor; A-7 to agree schema