Section 18 / 22What could stop 30 September and how it's mitigated
Export full PDFRisks, Dependencies & Controls
What could stop 30 September and how it's mitigated
Live RAID extract
Top ten risks with mitigations
Owned by the Project Manager, reviewed at every fortnightly steer.
| ID | Risk | Impact | Likelihood | Mitigation |
|---|---|---|---|---|
| R1 | Vendor decision slips past end of July, compressing build | High | Medium | Common demo script + fixed evaluation window; CEO-owned deadline; back-up decision date within same week |
| R2 | Data migration takes longer than planned (Excel is messier than expected) | High | High | Inventory started week 1; parallel cleanse & config; scope reducer: migrate live pipeline only, archive the rest |
| R3 | Bulgaria bid team can't free up time for design & UAT | High | Medium | Sponsor secures ring-fenced hours; sessions timed around bid deadlines; deliverables lightweight |
| R4 | Integrations (SSO / M365 / ERP) blocked by IT capacity | Medium | Medium | IT engaged week 1; MVP integrations only for go-live; nice-to-have deferred to wave 1 rollout |
| R5 | Config over-reach: 'while we're in here' features push the date | High | High | Fixed SOW; strict change control; anything non-critical parked in a wave-2 backlog |
| R6 | Adoption drops off after go-live once hypercare ends | High | Medium | Adoption KPIs owned by country leads; super-users; excel locked read-only; weekly adoption dashboard to CEO |
| R7 | Country leads resist standard stages / fields | Medium | High | Country-leads call before Wave 1; local flex defined and honoured; central squad backs country lead publicly |
| R8 | Vendor underperformance vs SOW | High | Low | Weekly delivery forum + vendor scorecard; contractual milestones; escalation to executive sponsor |
| R9 | GDPR / data residency issue surfaces late | Medium | Low | DPO engaged from week 1; DPIA completed before UAT; EU-region hosting default |
| R10 | Budget pressure on the £250k envelope | Medium | Medium | Live cost model; monthly finance check-in; contingency (5%) protected until wave 1 |