Risk Universe
The enterprise risk library, organized as category → subcategory → individual risk. It shares the same risk records as the Risk Register.
Risk taxonomy
6 categories · 24 subcategories · 62 risks
Risks that affect Northbridge's ability to achieve its strategic objectives and long-term value.
Risks from failed or inadequate internal processes, people, physical assets and third parties.
Risks to financial reporting integrity, liquidity, capital and financial assets.
Risks related to attracting, retaining, developing and governing the workforce.
Risks arising from information technology, data and emerging technologies such as AI.
Cybersecurity risks within the technology category.
Risks of legal, regulatory or ethical non-compliance and resulting sanctions.
AI · demo modeRisk identification
Based on Northbridge's industry (precision instruments), business model, operations and current risk list. You must approve each suggestion before it becomes official.
Changes to US–China tariffs raise landed cost of components sourced from APAC.
Why: 38% of BOM sourced from APAC suppliers; peers cite tariffs as a top-5 risk in recent 10-K filings.
Top 5 customers account for a large share of revenue, creating dependency.
Why: Top 5 customers = 41% of FY26 revenue; no risk in the inventory addresses this.
Extreme heat, wildfire or flooding disrupts the Cerritos plant or key suppliers.
Why: Cerritos sits in a high wildfire-smoke zone; SEC and EU disclosure rules increase scrutiny.
The acquired entity's network connects before security controls are aligned.
Why: Halcyon is listed as 'Never audited' in the Audit Universe, and ITGC finding F-2071 shows access weaknesses.
Proprietary optical designs are exposed through public AI tools.
Why: Survey comments from the CIO flag unapproved AI tool usage in engineering.