# Business Continuity Risk Register

FundApps has performed a business impact analysis and maintains a risk register as part of our business continuity management system. The full risk register is [maintained here \[Restricted to FundApps staff\]](https://docs.google.com/spreadsheets/d/1d_Oh2o5wQwEYpDvcTcuSnNgsTrAUX3sGWaAiH0Xxs4w/edit#gid=830758930). We do not include the full details here, but below is a summary of the risks that we have analysed.

| Ref | Risk Identified                                        | Guidance notes                                                                                                       | Risk type          |
| --- | ------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------- | ------------------ |
| 1   | Pandemic (flu like infection)                          | Widespread flu                                                                                                       | National           |
| 2   | Terrorist attack against UK generally                  | Dealt with under location risks                                                                                      | National           |
| 3   | Regional or national power failure                     |                                                                                                                      | National           |
| 4   | Fuel supply crisis                                     | Political instability at home or abroad makes petrol/diesel difficult to acquire                                     | National           |
| 5   | Solar weather                                          | Major flares from the Sun can disrupt networks, electricity grids and infrastructure in unpredicatble ways           | National           |
| 6   | Criminal activity aimed specifically against Fund Apps | Organizations someitmes targeted to move funds or act as a trusted party fronting for criminal activity              | Organisational     |
| 7   | Espionage against Fund Apps for high profile clients   | Organizations are sometimes targetted for espionage in order to gain insight into confidential information in client | Organisational     |
| 8   | Malicious damage by member of staff                    | Staff who are being disciplined or recently dismissed or suffering mental illness                                    | Organisational     |
| 9   | Loss of key individuals                                | Staff may be ill, have accidents or leave for other work                                                             | Organisational     |
| 10  | Earthquake                                             |                                                                                                                      | Location - Natural |
| 11  | Volcano                                                | Identified as a National Risk too                                                                                    | Location - Natural |
| 12  | Fluvial flooding                                       | Flooding from rivers                                                                                                 | Location - Natural |
| 13  | Flash (pluvial) flooding                               | Flash floods follow intense rain                                                                                     | Location - Natural |
| 14  | Severe weather (snow)                                  | Snow fall over large part of the area and remaining for 1 week                                                       | Location - Natural |
| 15  | Severe weather (prolonged low temperatures)            | Persistent low temperatures                                                                                          | Location - Natural |
| 16  | Severe weather (Heat Wave)                             | Temperatures exceeding 32C and minimum overnight exceeding 15C over 5 days                                           | Location - Natural |
| 17  | Severe weather (drought)                               | Prolonged shortage of rainfall or failure in water supply                                                            | Location - Natural |
| 18  | Outbreak of severe illness or communicable disease     | May arise from local transmission of disease or collective exposure to food pathogens or legionella et al            | Location - Health  |
| 19  | Impact to building from road traffic accident          |                                                                                                                      | Location - traffic |
| 20  | Road traffic accident blocking access roads            | Road intersection few LGVs                                                                                           | Location - traffic |
| 21  | Road traffic incident with hazardous chemicals         | Construction traffic may pass, petrol station opposite office                                                        | Location - traffic |
| 22  | Road traffic incident or fire with gas/gas cylinders   | Construction traffic with gas cylinders almost certainly passes office                                               | Location - traffic |
| 23  | Rail accident                                          | Old Street Tube Station only nearby line                                                                             | Location - traffic |
| 24  | Air accident                                           | Aircraft directly impacting site                                                                                     | Location - traffic |
| 25  | Neighbouring businesses                                | Activities of neighbours may expose Fund Apps to risks                                                               | Location           |
| 26  | Criminal activity against site                         | Opportunistic or directed activity                                                                                   | Location           |
| 27  | Terrorist action in vicinity                           | Fund Apps not targeted but impacted by nearby attack                                                                 | Location           |
| 28  | Terrorist action against site                          | Fund Apps not target per se, but site attacked for some perceived connections                                        | Location           |
| 29  | Effectiveness of Physical security                     | Criminals, terrorists, demonstrators can all be discouraged and prevented by effective perimeter security            | Perimeter          |
| 30  | Utility supply to site - Electricity                   | Liable to localised mains failure, substation fire and disturbance through ground works                              | Perimeter          |
| 31  | Utility supply to site - Gas                           | Liable to disturbance through ground works                                                                           | Perimeter          |
| 32  | Utility supply to site - Water                         | Liable to disturbance through ground works. Loss through systemic failures in distribution system.                   | Perimeter          |
| 33  | Utility supply to site - Sewerage                      | Liable to disturbance through ground works                                                                           | Perimeter          |
| 34  | Utility supply to site - Telecomms                     | Liable to disturbance through ground works and loss of local exchange                                                | Perimeter          |
| 35  | Building roof                                          | Roofs may leak giving rise to structural damage or flooding                                                          | Building           |
| 36  | Building structure                                     | Overall structure must be sound to withstand severe weather, tremors etc.                                            | Building           |
| 37  | Building structure                                     | Asbestos - danger to health and needs controlled operations for works                                                | Building           |
| 38  | Building basement areas                                | May be liable to flood from above or groundwater                                                                     | Building           |
| 39  | Building - internal water supplies                     | Pipes and tanks must be in good condition and not positioned where they will cause significant damage                | Building           |
| 40  | Building - M\&E                                        | M\&E provides the air handling, chillers, boilers and electrical infrastructure for the operation of the premises    | Building           |
| 41  | Fire within building                                   | Rare but highly disruptive and damaging with a risk to life                                                          | Building           |
| 42  | Loss or disruption to key supplier                     | Suppliers, distributors and others are key to any business operation                                                 | 3rd parties        |
| 43  | Loss of local IT infrastructure services               | Office IT loss                                                                                                       | IT                 |
| 44  | Loss of IT applications                                | Servers or storage failures in DCs                                                                                   | IT                 |
| 45  | Cyber attack                                           | Fund Apps targetted or simply collateral damage to other attack(s)                                                   | IT                 |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://policies.fundapps.co/client-portal/-LubIC9uIsME-_T0mNXu/fundapps-policies/business-continuity/risk-register.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
