Engineering governance · Risk oversight
Risk, Dependencies & Actions
A consolidated view of material engineering risks, cross-team dependencies, mitigation plans and overdue actions. Make accountability and escalation visible before risks affect delivery, security or service reliability.
Illustrative data only
Critical risks
1
Immediate attention required
High risks
1
Active mitigation required
Medium risks
1
Managed within agreed plan
Overdue actions
1
Escalate and confirm next steps
Risk and dependency register
Each material risk should have an accountable owner, mitigation, target date and clear escalation path.
Critical
High
Medium
| ID | Risk / dependency | Severity | Owner | Mitigation | Due date | Status |
|---|---|---|---|---|---|---|
| R-01 | External API change threatens release
Potential release delay or integration failure
|
High | Team B manager | Contract test and fallback | 16 Oct | In progress |
| R-02 | Critical dependency vulnerability
Potential security exposure if not remediated
|
Critical | Security lead | Upgrade and verify | 12 Oct · Overdue | Overdue |
| R-03 | Shared platform capacity constraint
Potential performance degradation under load
|
Medium | Platform lead | Capacity plan and load test | 20 Oct | On track |
Minimum information for each material risk
Record enough context to support decisions, track mitigation and understand the remaining exposure.
Risk and impactDescribe the event, affected outcome and potential consequences.
Likelihood and severityUse defined scales and assess the risk consistently.
Ownership and responseName one accountable owner; document mitigation, contingency and residual risk.
Due date and evidenceTrack target dates, escalation thresholds, supporting evidence and related decisions.
Consistent risk assessment
Assess likelihood and impact using organisation-wide definitions, then determine the required response.
LikelihoodRare · Possible · Likely
ImpactModerate · Major · Severe
ResponseMonitor · Mitigate · Escalate
Do not average away critical risks.
A critical security or safety concern requires explicit assessment and action,
regardless of the scores of unrelated risks.