Enterprise Risk Command Center — Build & Maintain

Risk ID: Proposed R-001, for confirmation in the organization’s register.
Title: Critical-component supplier concentration.
Objective: Timely delivery.
Cause: A critical component is supplied by one supplier, based on the supplied fact.
Event: A disruption could interrupt component availability.
Impact: Customer delivery commitments could be delayed; financial magnitude is unknown.
Risk statement: Because a critical component depends on one supplier, a disruption could interrupt availability and delay customer delivery commitments.

Inherent likelihood/impact/rating: Unknown; no approved scoring method or supporting exposure data supplied.
Controls and effectiveness: Unknown. No inventory, alternative sourcing or continuity measures assumed.
Residual rating and appetite status: Undetermined pending control evidence and approved appetite criteria.
Risk owner/accountable executive: To be assigned by management.

Proposed treatment investigation: Validate supplier dependency, lead times, stock coverage and contractual arrangements; assess qualified alternatives and continuity options. These are proposed actions, not implemented controls.
KRI proposal: Days of usable stock coverage for the critical component, if reliable inventory and consumption data exist. Threshold requires management approval.
Review trigger: Material supplier disruption or change in dependency; regular cadence to be agreed.

Next decisions: Assign ownership, approve assessment criteria, collect evidence and select treatment. No risk acceptance, supplier change or certified assessment performed.