Decision record
Third-party risk acceptance
Context
A critical supplier cannot meet a control requirement before launch.
Judgement
Balance business urgency with explicit ownership and time-bound treatment.
Coaching
Examine accountability, residual risk, escalation and review conditions.