Risk Details
Inherent Risk
Residual Risk
Mitigations
Risk Title
Risk Summary
Risk Area
Likelihood
Impact
Rating
Likelihood
Impact
Rating
- Engagement of short-term contractor resources to supplement
Architecture
Feasible
Significant Medium
Feasible
Minor
Low
targeted design activities
If the decision to disestablish roles is
- Extension of in-place contracted resource
confirmed and kaimahi are offered new Cybersecurity Very unlikely Significant
Low
- Acceleration of market engagement for Security Operations
Very unlikely Minor
Low
positions at a lower salary, this may
Centre
result in increasing the likelihood of key
- Engage further support from Catalyst
person risks eventuating due to a
- Temporarily extend roles in Operations to support software
greater reduction of internal capacity
activities (explore secondment opportunities)
than normal attrition.
IT Capacity & Capability
- Extend transition timeframes for a longer period at current
Applications
Feasible
Major
Medium
Slight
Significant
Low
salaries.
This could impact the Commission’s
- Adjust proposed approach to allow for offers to be made above
ability to undertake changes in its
100% of the new position based on a review of the competency,
operational systems such as MIKE,
performance, and tenure subject to CE approval.
ERSA, EMS & eRoll as part of GE2026
preparation and also limit its ability to
- Engagement of support from infrastructure suppliers (CCL, Spark)
execute by-election events.
Infrastructure Very unlikely Significant
Low
Very unlikely Minor
Low
- Engagement of short-term contractor resources to supplement
support needs.
- Architectural maturity is currently low and limited IP remains
within the team already due to current staff both <1yr tenure.
Architecture
Feasible
Significant Medium
Feasible
Significant
Medium
- Priority would be given to recruitment of architecture roles after
EOI outcomes are confirmed.
- Extension of in-place contractor positions (Infrastructure
If the decision to disestablish roles is
Engineer)
confirmed and kaimahi are offered new Cybersecurity Very unlikely Minor
Low
Very unlikely Minor
Low
- The Commission's cybersecurity systems are well documented
positions at a lower salary, this may
and utilise industry standard approaches
result in increasing the likelihood of key
person risks eventuating, resulting in a
- Activities for GE2026 readiness will need to be executed earlier in
loss of IP and knowledge within the IT
2025 to provide opportunities for new staff to engage & learn key
team through resignation or
operational tasks in GE2026 delivery.
IT Knowledge Retention
redundancy and impact service delivery.
- By-election delivery will rely more heavily on Catalyst for support
This could impact the Commission’s
- Adjust proposed approach to allow for offers to be made above
Applications
Feasible
Significant Medium
Slight
Significant
ability to undertake changes in it’s
Low
100% of the new position based on a review of the competency,
operational systems such as MIKE,
performance, and tenure subject to CE approval.
ERSA, EMS & eRoll as part of GE2026
- Priority would be given to recruitment of application roles after
preparation and also limit it’s ability to
EOI outcomes are confirmed.
execute by-election events.
- Extend transition timeframes for a longer period at current
salaries, including prioritise handover documentation.
- The Commission's standard use of infrastructure technologies
Infrastructure Very unlikely Minor
Low
and mature systems will contribute to a more straight-forward
Very unlikely Insignificant
Low
knowledge transfer if existing knowledge is not retained.
- Engage out-of-cycle approval processes from ELT & Board
If the consultation timeline is delayed
If the consultation timeline is delayed
this will create a prolonged change
Consultation timeline - Staff
period for staff members, resulting in
All IT staff
Feasible
Significant Medium - Continue with external support for P&C resourcing to support IT
Slight
Significant
Low
impacts
continued impacts to morale and
change
productivity.
If the change timeline is extended, this
- Extension of in-place contractor positions (Infrastructure Engineer
Consultation timeline - Capacity may result in delays in filling critical
& Infrastructure Manager)
All IT staff
Feasible
Significant Medium
Slight
Significant
Low
& Capability
roles in the IT team and a continued
- Engagement of short-term contractor resources to supplement
limitation of IT service delivery.
GE2026 workstream activities
If all significantly impacted kaimahi (8)
- Adjust proposed approach to allow for offers to be made above
do not accept new positions this may
100% of the new position for high risk roles subject to CE approval.
Financial - Redundancy
result in the Commission funding
Finance
Slight
Minor
Low
Slight
Minor
Low
redundancy payouts of up to a
- Some redundancy financial risk is accepted and accounted for in
maximum of $289k
the enterprise services budget.
