Cloud ERP procurement · ERP integration services · S2P agentic platform · AI agent governance
| Risk | Severity | Owner | Impact & evidence | Mitigation on record |
|---|---|---|---|---|
| ERP budget overrun | High | Corey Gray + Finance Director | Lowest compliant bid is €390k against a €250k budget (+€140k). The budget is 36% below the stated EMEA market range of €350k–€500k for a 350-user Finance/HR/CRM scope, so a budget increase or scope reduction is described as mandatory. | Option D hybrid: phased CRM (−€50k), 280 initial users (−€30k), 10–15% negotiated discount (−€40k–€60k). |
| Decision paralysis on vendor award | High | Corey Gray (Procurement Lead) | The evaluation was issued on 26 Feb 2026 and still ends with three unanswered approval checkboxes. Every downstream milestone — notifications, negotiation, contract, kick-off — is sequenced from that decision. | Confirm the three decisions, then trigger the Week 1 notification pack. |
| CloudFirst technical non-compliance | Medium | Procurement / Technical evaluation | Batch-only nightly inventory against a real-time requirement, REST API with read-only writes requiring legacy SOAP, automated PO generation roadmap-dependent to Q4 2026, no SLA penalty clauses, SOC 2 Type II missing and ISO 27001 pending. | Disqualify immediately — described as non-negotiable. |
| IntegraPro roadmap dependency | Medium | Procurement / Legal | Supplier portal not available until Q3 2026 and AI-driven insights on roadmap for Q2 2026; 26-month average implementation exceeds the 24-month target; only 3 EMEA references against ERPMax's 12. | Hold as reserve only, subject to contractual portal guarantee, ≥25% cost reduction and full SOC 2 report. |
| Integration SOW / compliance gap | Medium | Corey Gray | The integration-services RFP is compliant but the SOW template is missing, and no EcoVadis or CreditSafe ratings exist for Zava Trading, Contoso Supplies or Fabrikam — leaving vendor risk unrated. | Upload SOW template; obtain third-party ratings before award. |
| Connector data integrity | High | Corey Gray | ServiceNow connector flagged as a compliance risk (21 Aug) and Jira connector as a data integrity risk (12 Aug); both still open in the 6 Sep digest. Programme reporting drawn from those systems may be stale. | Remediate both connectors via the M365 admin portal. |
| Agent registration automation offline | Medium | Corey Gray (ZAG-6) | The "When agent is added or updated" flow was disabled after consistent failures, and ZAG-6 (agent registration & verification) remains unassigned — governance coverage of new agents is manual. | Fix or rebuild the flow; assign ZAG-6. |
| Compliance criteria overdue | Medium | Corey Gray (ZAG-5) | ZAG-5, drafting compliance criteria for agent behaviour, is reported overdue — the S2P agent scale-up has no signed-off behavioural standard behind it. | Prioritise ZAG-5 ahead of other ZAG items. |
| Stakeholder communication debt | Medium | Corey Gray → Adil Eli | Three requests from Adil Eli are open: an update due 25 Jun, a file due 19 Jun, and the S2P agent status awaited since 22 Apr. Total 11 open tasks, 5 high priority, none blocked on anyone else. | Clear the three Adil Eli items with a status and revised ETA. |
| Infrastructure programme opacity | Medium | Unassigned | R400 Infrastructure and FCS Application Upgrade have no channel activity, no calendar events in the reporting window and no meeting transcripts — status is unverifiable beyond one late Planner task. | Establish a reporting cadence or nominate a named owner. |
Independent 2026 pricing research reports that subscription fees account for only about 40–60% of three-year cloud ERP spend, with the balance in implementation, integrations, sandboxes, storage, training and renewal inflation. That structure matches the internal €390k breakdown (implementation €156k, Year 1 licence €136.5k, three-year support €97.5k) and supports the finding that a €250k target was set below market.
flectic.com/learn/erp-cost-per-userPublic 2026 comparisons of per-user pricing across 21–25 cloud ERP systems, plus TCO and hidden-cost guides, provide external reference points for the Option D negotiation target of €250k–€270k and for the ~€390/user annual licensing assumption used in the user-count option.
erpresearch.com/en-us/cloud-erp-per-user-pricingSAP's 2026 materials describe next-generation Ariba moving to SAP BTP for open APIs and cross-suite data consistency, with Joule copilot and procurement agents positioned as the intelligent-procurement layer. Third-party trackers separate what is generally available from what remains roadmap. This is directly relevant to the Zava S2P agent target of 80% adoption and to the SAP/ARIBA vendor-master and contract-registration steps in weeks 8–9.
news.sap.com — Next-Gen SAP Ariba: foundation for intelligent procurement (March 2026)Published 2026 enterprise surveys report production AI-agent deployment in roughly the 31%–54% range depending on the study, against far higher rates of experimentation. An 80% enterprise-wide adoption goal for the S2P agent therefore sits well above the reported market average — reinforcing the need for the overdue ZAG-5 compliance criteria and a working agent-registration process before scaling.
ampcome.com — Enterprise AI agents 2026 mid-year reportThe adoption and pricing figures above come from commercial market-research and vendor-adjacent publications, not audited data, and the two adoption studies disagree with each other. Treat them as directional context for the steering committee rather than as validated benchmarks.