Supply Chain Risk Mapping System

Overview

CNC must demonstrate the capability to effectively map and manage Supply Chain Risk, as mandated within DESNZ's Civil Nuclear Sector Cyber Security Strategy. Therefore, CNC is looking to continue its access to the Risk Ledger Platform, a computer software solution for supply chain risk management and increasing licence numbers to ensure specific functions and activities are not restricted due to absence or conflicting priorities of the Subject Matter Experts (SMEs). Risk Ledger delivers an end-to-end process from initial supplier contact, submission of supplier responses and measured compliance analysis. The tooling provides access to connect to suppliers already enrolled on the platform for other clients as well as extending to Suppliers, specific to CNC, who have yet to complete the assessment questions. Use of the Risk Ledger platform provides a quick and efficient means to view, validate and assure supplier arrangements. CNC have utilised the application as a pilot and this therefore negates the need for current users to undergo product training/familiarisation. The cost of training for new and existing users is included in the overall licence cost, therefore demonstrating value for money. Following a review of alternative suppliers under the Government Market Place G Cloud 14, no other supplier was identified who could meet the functions and services scoped as requirements to support CNC third party risk management process. Risk Ledger were also able to provide a three-year contract option through direct award, which highlighted a £259,290 inc VAT saving against any G Cloud pricing model.