{"entity":"Acme Supplies SRL","project_name":"Warehouse Management System Rollout","project_code":"WMS-2026","project_manager":"Sophie Dubois","as_of":"2026-05-20","risks":[{"id":"R-001","description":"Vendor resource unavailability during configuration phase delays UAT readiness.","category":"resource","likelihood":3,"impact":4,"owner":"Project Manager","mitigation":"Secure named resources in the SOW with replacement SLAs. Weekly availability review with vendor PM.","status":"mitigating"},{"id":"R-002","description":"Sage ERP API performance below 99.5% SLA during peak, blocking real-time inventory sync.","category":"technical","likelihood":3,"impact":5,"owner":"IT Lead","mitigation":"Run dedicated load tests in week 14. Design queued retry with idempotency. Dual-write fallback retained for 30 days post go-live.","status":"mitigating"},{"id":"R-003","description":"Carrier API contract change (DHL) invalidates integration specification during build.","category":"external","likelihood":2,"impact":3,"owner":"IT Lead","mitigation":"Abstract carrier layer behind an adapter. Subscribe to vendor change notices and review monthly.","status":"open"},{"id":"R-004","description":"Go-live overruns into retail peak window (27 Nov - 31 Dec), risking revenue and SLA penalties.","category":"schedule","likelihood":2,"impact":5,"owner":"Sponsor","mitigation":"Hard freeze from 20 November; go/no-go checkpoint on 5 November. Roll-back plan tested in UAT.","status":"open"},{"id":"R-005","description":"Budget overrun beyond contingency driven by scope creep on custom reports.","category":"financial","likelihood":3,"impact":4,"owner":"Head of Finance","mitigation":"CCB governs all scope changes. Custom reports capped at 20 in the baseline; additional reports deferred to phase 2.","status":"mitigating"},{"id":"R-006","description":"GDPR DPIA flags employee workforce-analytics module as high residual risk, requiring DPO sign-off that may block deployment.","category":"regulatory","likelihood":2,"impact":3,"owner":"DPO","mitigation":"Run DPIA in week 8. Prepare alternative with pseudonymised metrics if identification risk is not sufficiently mitigated.","status":"open"},{"id":"R-007","description":"Warehouse staff resistance to new picking workflow reduces throughput by more than 10% during cut-over.","category":"resource","likelihood":3,"impact":3,"owner":"Warehouse Manager","mitigation":"Change-champion network in place from week 10. Training starts eight weeks before go-live. Stand-by manual process documented.","status":"mitigating"},{"id":"R-008","description":"Critical bug discovered in hypercare that corrupts stock counts.","category":"technical","likelihood":2,"impact":5,"owner":"IT Lead","mitigation":"Full backup before cut-over. Point-in-time recovery tested. Cycle-count procedure triggered on any reconciliation anomaly >1%.","status":"open"},{"id":"R-009","description":"Key internal SME leaves during the project.","category":"resource","likelihood":2,"impact":4,"owner":"Project Manager","mitigation":"Document all key processes. Shadow SME with a back-up from the team from week 4.","status":"mitigating"},{"id":"R-010","description":"Works Council withholds consent on working-time impact of new rostering.","category":"regulatory","likelihood":2,"impact":4,"owner":"Head of People","mitigation":"Early engagement from week 2. No rostering change forced through without consent.","status":"mitigating"},{"id":"R-011","description":"Integration defect with PostNL causes duplicate label printing.","category":"technical","likelihood":2,"impact":2,"owner":"IT Lead","mitigation":"Idempotency key added to label creation. Reconciliation report run daily in hypercare.","status":"closed"},{"id":"R-012","description":"Cosmic-ray interference with WMS (low likelihood, illustrative).","category":"other","likelihood":1,"impact":1,"owner":"Project Manager","mitigation":"Standard ECC memory. Accepted as a residual risk given negligible severity.","status":"accepted"}],"escalations":["R-002 and R-004 carry severity >= 15 and are escalated to the Steering Committee at the next monthly review.","R-006 requires DPO formal opinion before the analytics module enters UAT."],"register_owner":{"name":"Sophie Dubois","title":"Programme Manager"}}