Status: Planning Response
Due: Sep 28, 2027
Assignees: Darrell Finley
Risk statement. The customer-facing analytics dashboard depends entirely on one vendor's API. The contract has no uptime SLA, no credits and a 30-day termination clause on their side. They had two multi-hour outages in the last quarter.
Trigger / early warning. A third outage exceeding one hour, or any change-of-terms notice from the vendor.
Consequence if realised. A customer-visible feature goes dark with no contractual recourse and no fallback.
Current response. Transfer. Renegotiate for an SLA with credits at renewal; if they refuse, cache aggregate data locally so the dashboard degrades rather than fails.
Risk ID:
Date Identified: Jun 25, 2027
Likelihood: 2 · Unlikely
Impact: 4 · Major
Response Strategy: Transfer
Risk Score: 8
Category: Vendor & Third Party
Risk Level: Medium (5-9)
R-15
Date Identified: Jun 25, 2027
Likelihood: 2 · Unlikely
Impact: 4 · Major
Response Strategy: Transfer
Risk Score: 8
Category: Vendor & Third Party
Risk Level: Medium (5-9)
Created by Vicky Aug 7, 2026, Edited Aug 7, 2026