Admin

Admin · Governance · Risk

Risk, registered.

Inherent against residual, the concentration story behind the corridor, and the personnel credential clock. Every risk traces back to the same DEN to KC fault the rest of the portal tells.

Open risks1of 5 registered
Highest inherent91 to 9 scale
Corridor exposureSingle-routeDEN-KC-DFW-PHX
Mitigated1controls effective

Risk register

inherent against residual · 5x5 matrix

Sortable register, the accessible view. Inherent is the untreated score; residual reflects the current treatment posture.

Sorted by Inherent -> residual, descending. 5 risks.

Risk register, sortable. Inherent score runs on a 1 to 9 scale (likelihood times impact). Residual reflects the current treatment posture. Select a column header to change the sort.
RSK-1Single-provider corridor concentration (DEN-KC-DFW-PHX) Onboard a diverse-provider alternate on the corridor; gate Premium feasibility on provider diversity. BRCH-1inc-1fc-1concentrationhighhigh9 9openNetwork engineering
RSK-2Active SLA breach on conn-5 Emergency reroute in flight (CHG-5121); credit accrued and reconciled to settlement. BRCH-1inc-1CHG-5121availabilityhighmedium6 3monitoringIncident commander
RSK-3IdP cert rotation across all tenants Scheduled under maintenance-window gate (CHG-5102); cert-expiry-watch enforced. CHG-5102securitymediumhigh6 3monitoringPlatform security
RSK-4Privileged MFA enrollment gap Enrollment grace narrows scope; u-nw-ops pending. mfa-required policy enforced. u-nw-opssecuritymediummedium4 2monitoringIT operations
RSK-5Agentic autonomy scope drift Master switch off (advisory policy); canary-policy gate gates every agent run. CHG-5114aegis-botcompliancelowmedium2 1mitigatedGovernance council

Vendor and personnel

corridor concentration · credential expiry
sim
Vendor concentration and personnel credential expiry on the DEN-KC-DFW-PHX corridor. Vendor rows show corridor span share; personnel rows show operator credential expiry with a text label and pill, never color alone.
EntityTypeDetailStatusLinked
Meridian Capacity Co.Vendor concentrationOperates 2 of 2 DEN-KC-DFW-PHX spansDEN-KC (down) · DFW-PHX (degraded)single-route100% shareinc-1inc-2BRCH-1
NaaS Labs IdPPersonnel certoidc signing cert, expires 2026-08-30fingerprint sha256:412d91ef…29d to expiryCHG-5102
Northwind IdPPersonnel certsaml signing cert, expires 2026-08-30fingerprint sha256:3c552dd3…29d to expiryCHG-5102
Beacon Digital IdPPersonnel certoidc signing cert, expires 2026-08-30fingerprint sha256:1332229a…29d to expiryCHG-5102
Meridian IdPPersonnel certoidc signing cert, expires 2026-08-30fingerprint sha256:1e473fc5…29d to expiryCHG-5102
Harbor Grain NetworksPersonnel certsaml signing cert, expires 2026-09-15fingerprint sha256:aa63da13…Valid, 45d leftCHG-5102
Aurora Transit IdPPersonnel certoidc signing cert, expires 2026-11-01fingerprint sha256:e608c4d6…Valid, 92d leftCHG-5102

Concentration mitigation: Onboard a diverse provider on the corridor; gate Premium on provider diversity until a second operator is live.