TPRMAutomationSupplier — IT Consulting Annual Reassessment
Action Pending
Inherent RiskCritical
Residual RiskHigh
Due DiligencePre Contract
Inherent Risk Characteristics
Risk Assessment Document:
RSA-001838-Apr2026
Critical
High
Moderate
Low
Not Applicable
Information Security
Critical
Privacy
High
Resiliency
Moderate
Contingent Workforce
Moderate
Software Accessibility
Low
AI Ethics
Moderate
Ethics & Integrity
High
Trade Compliance
Moderate
Dow Jones — Sanctions
Low
Dow Jones — Adverse Media
Low
Dow Jones — PEP
Low
State Owned Companies
Low
BitSight Cyber Rating
Moderate
Financial Viability
Low
PEP Testing
Not Applicable
2 critical control gaps detected on Data Security & Access Management. Residual risk exceeds tolerance — recommend escalation.