Risk register
Helvetia Métal SA · Industry / precision machining · 2026-Q3 · risk appetite: net level ≥ 12
- Risks in the register
- 11
- Above appetite
- 2
- Overdue actions
- 2
- Last updated
- 23.10.2026
| Code | Risk | Owner | Gross | Net | Trend |
|---|---|---|---|---|---|
| R-01 | Information system outage (ransomware) Cyber/IT | IT (external provider) | 20 | 12 · High | Rising |
| R-03 | Customer concentration (38 % of revenue) Strategic | Sales management | 15 | 12 · High | Stable |
| R-05 | Supply disruption (steel, single supplier) Third parties | Procurement | 12 | 9 · Medium | Rising |
| R-12 | Unmanaged use of AI tools Compliance | Executive management | 12 | 9 · Medium | Rising |
| R-04 | Departure of a key person (production manager) HR | HR Director | 12 | 8 · Medium | Stable |
| R-09 | Occupational accident (production line) Health & safety (OHS) | QHSE / OHS Manager | 12 | 8 · Medium | Stable |
| R-02 | FADP non-compliance (HR data) Compliance | HR | 12 | 6 · Medium | Falling |
| R-06 | Seasonal cash-flow strain Financial | Finance Director | 12 | 6 · Medium | Falling |
| R-07 | Product non-quality / reputational damage Reputation | QHSE Manager | 8 | 6 · Medium | Stable |
| R-08 | Regulatory tightening (emissions) Operational | QHSE Manager | 6 | 6 · Medium | Rising |
| R-11 | Fraud through changed bank details Financial | Finance Director | 12 | 6 · Medium | Stable |
Action plans
- R-01 Test the full restoration of backups · IT · due 30.09.2026Overdue
- R-01 Segment the OT/IT network · IT · due 31.10.2026To do
- R-02 Finalise the record of processing activities + sign supplier DPAs · HR · due 15.10.2026Overdue
- R-03 Convert 3 new accounts above 5 % of revenue · Sales management · due 31.12.2026In progress
- R-04 Document critical processes and train a back-up · HR Director · due 30.11.2026To do
- R-05 Qualify a second steel supplier · Procurement · due 31.10.2026In progress
- R-06 Renegotiate supplier payment terms over the Q4 peak · CFO · due 15.09.2026Done
- R-08 Audit emissions compliance and cost the upgrade · QHSE · due 31.01.2027To do
- R-09 Audit the machine guards + refresh safety training (SUVA) · QHSE · due 15.11.2026In progress
- R-11 Call back the number already on file before any IBAN change, and record it in the supplier file · CFO · due 30.11.2026To do
- R-12 Adopt an AI usage rule and open business accounts that do not train models on our data · Executive management · due 15.12.2026To do
From your Excel file to the report: a fictitious example, step by step
This is a sample register. Create your workspace to import your risks and generate your report.
Create my workspaceRisk level = Likelihood × Impact · thresholds 1-4 low · 5-9 medium · 10-14 high · 15-25 critical. 12 = highest net risk in the register.