Risk Register

The central system of record. Scores change only when an authorized reviewer approves an assessment.

Enterprise risks

62 shown

Critical residual

Pending approval

Weak / ineffective controls

Enterprise risks

Sorted by residual score. Click a risk to open its record.

Weak controls only

Risk ID	Risk name	Category	Subcategory	Owner	Inherent	Residual	Controls	Priority	Response	Assessment	Last assessed	Approval
ERM-042	Ransomware attack	Technology	Cybersecurity	Chief Information Security Officer	100	60 ▲	Moderate	Critical	Transfer	Assessed	Jun 30, 2026	Approved
ERM-051	Unauthorized AI usage	Technology	Artificial Intelligence	Chief Information Officer	60	60 –	Ineffective	Critical	Avoid	Assessed	Jun 30, 2026	Approved
ERM-011	Supplier disruption	Operational	Supply Chain	VP Supply Chain	64	51.2 –	Weak	High	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-043	Unauthorized access to financial systems	Technology	Cybersecurity	Chief Information Security Officer	64	51.2 ▲	Weak	High	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-041	Data breach	Technology	Cybersecurity	Chief Information Security Officer	80	48 ▲	Moderate	High	Transfer	Assessed	Jun 30, 2026	Approved
ERM-052	AI governance failure	Technology	Artificial Intelligence	Chief Information Officer	48	48 ▼	Ineffective	High	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-006	M&A integration failure	Strategic	Corporate Strategy	Chief Executive Officer	48	38.4 –	Weak	High	Mitigate	Assessed	Jun 30, 2026	Pending Approval
ERM-012	Vendor concentration	Operational	Supply Chain	VP Supply Chain	48	38.4 –	Weak	High	Share	Assessed	Jun 30, 2026	Approved
ERM-002	Competitive disruption	Strategic	Market & Competition	Chief Strategy Officer	32	32 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-003	Changing customer preferences	Strategic	Market & Competition	Chief Strategy Officer	32	32 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-028	Inadequate access to capital	Financial	Liquidity	Treasurer	32	32 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-053	Regulatory violations	Regulatory & Compliance	Regulatory Compliance	Chief Compliance Officer	32	32 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-054	Failure to comply with new regulations	Regulatory & Compliance	Regulatory Compliance	Chief Compliance Officer	32	32 –	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-009	Stakeholder confidence deterioration	Strategic	Reputation	Chief Communications Officer	75	30 –	Strong	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-034	Key employee turnover	Human Resources	Talent Management	Chief Human Resources Officer	75	30 –	Strong	Medium	Accept	Assessed	Jun 30, 2026	Approved
ERM-055	Export control violations	Regulatory & Compliance	Regulatory Compliance	Chief Compliance Officer	45	27 –	Moderate	Medium	Avoid	Assessed	Jun 30, 2026	Approved
ERM-001	Loss of market share	Strategic	Market & Competition	Chief Strategy Officer	24	24 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-025	Inaccurate financial disclosures	Financial	Financial Reporting	Chief Financial Officer	24	24 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-027	Cash flow shortage	Financial	Liquidity	Treasurer	24	24 ▼	Ineffective	Medium	Mitigate	Not assessed	—	Draft
ERM-050	AI model errors	Technology	Artificial Intelligence	Chief Information Officer	24	24 ▼	Ineffective	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-035	Talent shortages	Human Resources	Talent Management	Chief Human Resources Officer	24	19.2 –	Weak	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-019	Employee safety incidents	Operational	Health & Safety	VP Environment, Health & Safety	20	16 ▲	Weak	Medium	Mitigate	Assessed	Jun 30, 2026	Pending Approval
ERM-059	Personal data protection violations	Regulatory & Compliance	Privacy	General Counsel	75	15 –	Very Strong	Medium	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-026	Revenue recognition errors	Financial	Financial Reporting	Chief Financial Officer	36	14.4 ▼	Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-031	Foreign exchange exposure	Financial	Treasury	Treasurer	36	14.4 –	Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-005	Failed strategic initiatives	Strategic	Corporate Strategy	Chief Executive Officer	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-007	Business model disruption	Strategic	Corporate Strategy	Chief Executive Officer	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-008	Brand damage	Strategic	Reputation	Chief Communications Officer	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-014	Semiconductor component shortage	Operational	Supply Chain	VP Supply Chain	20	12 ▲	Moderate	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-015	Operational disruption	Operational	Business Continuity	Chief Operating Officer	20	12 ▲	Moderate	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-016	Disaster recovery failure	Operational	Business Continuity	Chief Operating Officer	20	12 ▲	Moderate	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-017	Manufacturing plant outage	Operational	Business Continuity	Chief Operating Officer	20	12 ▲	Moderate	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-018	Workplace injuries	Operational	Health & Safety	VP Environment, Health & Safety	20	12 ▲	Moderate	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-030	Asset misappropriation	Financial	Fraud	Chief Financial Officer	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-032	Interest rate exposure	Financial	Treasury	Treasurer	60	12 –	Very Strong	Low	Accept	Assessed	Jun 30, 2026	Pending Approval
ERM-033	Tax position challenge	Financial	Tax	VP Tax	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-039	Poor employee engagement	Human Resources	Organizational Culture	Chief Human Resources Officer	20	12 ▲	Moderate	Low	Accept	Assessed	Jun 30, 2026	Approved
ERM-040	Leadership succession failure	Human Resources	Organizational Culture	Chief Human Resources Officer	20	12 ▲	Moderate	Low	Accept	Assessed	Jun 30, 2026	Approved
ERM-044	Third-party cyber exposure	Technology	Cybersecurity	Chief Information Security Officer	20	12 ▲	Moderate	Low	Mitigate	Not assessed	—	Draft
ERM-056	Litigation exposure	Regulatory & Compliance	Legal	General Counsel	60	12 –	Very Strong	Low	Transfer	Assessed	Jun 30, 2026	Approved
ERM-057	Contractual noncompliance	Regulatory & Compliance	Legal	General Counsel	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-058	Intellectual property infringement	Regulatory & Compliance	Legal	General Counsel	60	12 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Pending Approval
ERM-024	Financial statement misstatement	Financial	Financial Reporting	Chief Financial Officer	45	9 ▼	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-010	ESG commitments not met	Strategic	Reputation	Chief Communications Officer	20	8 –	Strong	Low	Mitigate	Not assessed	—	Draft
ERM-013	Logistics interruption	Operational	Supply Chain	VP Supply Chain	20	8 –	Strong	Low	Share	Assessed	Jun 30, 2026	Approved
ERM-036	Employee misconduct	Human Resources	Workforce	Chief Human Resources Officer	20	8 –	Strong	Low	Accept	Assessed	Jun 30, 2026	Approved
ERM-037	Workforce disruption	Human Resources	Workforce	Chief Human Resources Officer	20	8 –	Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-038	Labor relations dispute	Human Resources	Workforce	Chief Human Resources Officer	20	8 –	Strong	Low	Accept	Assessed	Jun 30, 2026	Approved
ERM-060	Cross-border data transfer noncompliance	Regulatory & Compliance	Privacy	General Counsel	20	8 –	Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-061	Bribery and corruption	Regulatory & Compliance	Ethics	Chief Compliance Officer	20	8 –	Strong	Low	Mitigate	Not assessed	—	Draft
ERM-062	Conflicts of interest	Regulatory & Compliance	Ethics	Chief Compliance Officer	20	8 –	Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-021	Third-party compliance failure	Operational	Third-Party Management	Chief Procurement Officer	9	7.2 –	Weak	Low	Share	Assessed	Jun 30, 2026	Approved
ERM-022	Product defects and recalls	Operational	Product Quality	VP Quality	9	7.2 –	Weak	Low	Transfer	Assessed	Jun 30, 2026	Approved
ERM-023	Warranty cost escalation	Operational	Product Quality	VP Quality	9	7.2 –	Weak	Low	Accept	Assessed	Jun 30, 2026	Approved
ERM-046	IT infrastructure failure	Technology	IT Operations	Chief Information Officer	9	7.2 –	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-047	ERP modernization delay	Technology	IT Operations	Chief Information Officer	9	7.2 –	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-048	Data integrity failure	Technology	Data Governance	Chief Data Officer	9	7.2 –	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-049	Unauthorized data disclosure	Technology	Data Governance	Chief Data Officer	9	7.2 ▼	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-004	Pricing pressure from low-cost entrants	Strategic	Market & Competition	Chief Strategy Officer	32	6.4 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-029	Financial fraud	Financial	Fraud	Chief Financial Officer	32	6.4 –	Very Strong	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-020	Vendor performance failure	Operational	Third-Party Management	Chief Procurement Officer	6	4.8 –	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Approved
ERM-045	System outage	Technology	IT Operations	Chief Information Officer	6	4.8 –	Weak	Low	Mitigate	Assessed	Jun 30, 2026	Pending Approval

SOX risks you added

SOX risks stay in the SOX Risk Assessment. Promote one only if it's also an enterprise risk.

None yet. Add one on the SOX Risk Assessment page.