RK-2026-014 · technology · platform · owner Chief information officer

Cyber incident takes the platform offline

Ransomware or a supplier outage removes access to the platform. Cause: Phishing; unpatched systems; supplier failure. Consequence: Services stop; warnings late; records at risk.

OPEN

Inherent

16

extreme

Residual

8 (2 × 4)

medium

Appetite

9

technology: We accept moderate technology risk in change, and low risk t…

Signal

manual

reviewed by the owner

Controls

  • Essential Eight controls

    Security architecture

  • Continuity plans with RTOs · MG-16

Treatments

  • Complete multi-factor authentication for every delegate · Chief information officer · due 29/10/2026OPEN

Record

  • On the register; no movement yet.

Risk register