This page explains how we record and assess DIP risks, plan actions to reduce them, and investigate any issues or breaches that arise.
We manage risks to keep the Data Integration Platform (DIP) reliable, secure and compliant with the DIP Rules. Our risk management approach is based on:
- a central risk register – the DIP Manager Risk Evaluation Document (DM RED)
- a set of planned actions – the Risk Operating Plan (DM ROP)
What we mean by 'risk'
A risk is anything that could:
- affect the availability or performance of DIP
- cause incorrect, late or missing data flows
- lead to non‑compliance with DIP Rules or other obligations
- harm market participants or end consumers
The DIP Manager records, assesses and regularly reviews these risks so we can:
- spot issues early
- prioritise the most important risks
- plan and track actions to reduce them
Our annual risk management cycle
The DIP Assurance Strategy follows the financial year and aligns with the industry’s Performance Assurance Operating Period (PAOP). The full annual cycle starts from April 2026, with key activities taking place in the first quarter of each year:
January – Evaluate DIP risks
- We assess risks that could affect the DIP or DIP Users
- We may consult DIP Users to capture new or emerging risks
February – Consult and review performance
- DIP Risk Operating Plan consultation – we publish a draft plan and invite feedback
- Annual Assurance Report – we publish a review of the previous year’s Risk Operating Plan, including outcomes and improvements
March – Finalise the Risk Operating Plan
- We issue the final DIP Risk Operating Plan, setting out how we will monitor, assess and manage risks during the year
Risk register: DIP Manager Risk Evaluation Document (DM RED)
The DIP Manager Risk Evaluation Document (DM RED) is developed to assess potential risk events that could occur during a financial year that may directly affect a DIP Users ability to fulfil the obligations set out in the DIP Rules.
DIP Manager Risk Evaluation Document (Size: )Risk Operating Plan (DM ROP)
The DIP Manager Risk Operating Plan (DM ROP) sets out the activities that will be undertaken to mitigate the Risk Events identified in the DM RED.
The DM RED and DM ROP work together:
- the DM RED describes and evaluates the risks
- the DM ROP describes how we plan to deal with those risks