Risk Register · 30 tracked, 5 critical

Consolidated from all 13 expert briefs plus the critic pass: deduplicated, scored, and ranked by likelihood Ã— impact (H=3 / M=2 / L=1). Every risk carries an action-oriented mitigation and a named owner. 44 calendar days remain to the Aug 15 deadline; the five kill criteria below define exactly when that date is formally declared missed — and what the fallback is.

30
Risks tracked
5
Critical (score 9)
18/30
Mitigations in motion
4–8 wk
#1 risk — ISP fiber slip (R01)
The single biggest risk is not hardware — it is provisioning. An ISP with no existing building-entry facilities needs a 4–8+ week access agreement before install even starts, which misses mid-August outright. The two highest-leverage actions this week: ask the building PMO today which ISPs are already lit in the riser, and buy the ₱8,000 5G CPE that makes day-one internet independent of fiber entirely.

Register — ranked by likelihood × impact

IDRiskLikelihoodImpactMitigationOwnerStatus
R01 ISP fiber provisioning slip
Enterprise fiber runs 4–8+ wk where the ISP lacks building-entry facilities; even lit-building PLDT commits only 30–45 days. RISE benchmarks 1.8 wk — but only in buildings it already serves.
HH Two parallel applications (RISE + PLDT/Converge) lodged wk of Jul 6; PMO asked today which ISPs are lit in the riser; 5G CPE (₱8,000) bought as day-one WAN so go-live never depends on fiber. PaulMITIGATING
R02 Ceiling closes before the Cat6A pull
Suspended-ceiling closure expected ~Jul 16–30; post-closure pulls cost 2–5×, damage new tiles and add 1–2 wk.
HH Written ceiling-close date from the fit-out GC in W1; pull booked for W3 (Jul 20–24) as a named subcontractor slot; AP-location tiles closed last. Fit-out GC + installerMITIGATING
R03 PMO drawing-approval cycle outlasts the window
Verified tower turnarounds: 7–15 working days per review cycle, each resubmission restarts the clock — and cabling may not legally start unapproved.
HH Lodge complete, pre-aligned ECE-signed low-voltage sheets by Jul 6; request expedited/partial approval of the LV scope or a conditional NTP under the GC's existing permit. Paul + PMOOPEN
R04 Server-room thermal runaway
~1,190 W design heat load in the 4.97 sqm interior room; building AC is off nights/weekends — 35–40 °C within hours of a cooling gap, throttling gear and halving UPS battery life.
HH Dedicated 1.0 HP inverter split (₱24,500 + ₱9,000 install) running 24/7 at 24–25 °C; thermostat-controlled transfer fan as second path (₱3,500); >30 °C sensor alert webhooked to Teams (₱2,500). Paul + MEPOPEN
R05 Hardware indent / stock-out
U7 Pro XGS and the PoE++ switch verified out of stock at PH retail (Jul 2); distributor indent runs 2–6 wk against a Jul 14 order deadline.
HH PO by Jul 14 with 50% down and a contractual delivery date; written stock confirmation in the RFQ; fallbacks pre-approved (U7 Pro / Pro Max APs, USW-Pro-XG-10-PoE or stopgap PoE++ switch). Paul + distributorMITIGATING
R06 VECO brownouts outlast the UPS
60–90 min rotational load-drops ran across Metro Cebu in May–Jun 2026; the 1.6 kVA UPS holds only ~9–20 min at full rack load.
HM Confirm tenant-floor genset coverage with the PMO (question already in the W1 email); load-shed runbook: drop AP PoE, keep gateway + 5G CPE (~60–80 W) → 60–100 min ride-through. Paul + PMOMITIGATING
R07 Desk-wiring scope fork expires with the ceiling
Options B/C (₱930,000 / ₱1,590,000) become 2–5× more expensive once the ceiling closes; the decision deadline is Fri Jul 10.
MH Force the A/B/C decision by Jul 10 with the priced decision pack; if only A is approved, buy the ₱50,000 reversibility package (30% spare tray, 2× 50 mm conduit stubs, 14 pole bases + pull strings). ManagementOPEN
R08 UCG-Fiber SPOF / reused gear DOA
Single gateway, no HA pairing; a dead reused unit discovered in August kills the cutover — and no expert had scheduled a verification.
MH Bench-test the reused UCG-Fiber + XGS in early July (power-on, firmware update, .unf config export); cloud backups enforced; replacement unit ₱21,900 ex-VAT if the test fails. PaulOPEN
R09 PoE+ mismatch replicated from the old quote
The quoted PoE+ injector under-powers the 802.3bt U7 Pro XGS (29 W max): boot-loops and silently disabled radios that are hard to diagnose later.
MH Injector line deleted from the BOM; every AP port is 802.3bt on the 400 W switch; PoE draw verified per port at commissioning. InstallerMITIGATING
R10 NTC / customs seizure on direct import
Radio equipment landing without a pre-filed NTC Permit to Import faces a 1–4 wk Bureau of Customs hold — seizure worst case — which single-handedly kills mid-August.
MH Buy from an authorized PH distributor (iConnect Cebu / MEC): the distributor is importer of record and carries all NTC/customs risk for a ~25–30% channel premium. Direct import formally rejected. ProcurementMITIGATING
R11 Fire-stop violations hold the FSIC
Unsealed penetrations from cable pulls and the condensate pipe are classic Fire Safety Inspection Certificate blockers — they delay move-in, not just WiFi.
MH Intumescent sealant on every penetration, photo-documented before ceiling closure; building FDAS contractor booked in July for the server-room smoke-detector tie-in. Fit-out GCOPEN
R12 Theft from the unsecured fit-out site
~₱300,000 of network gear on an open construction floor; the landlord is contractually not liable for delivered-but-uninstalled equipment.
MH Deliver late (just before install); lock the server room as an early-works item; add gear to contents/CARI insurance effective from delivery date; installer COI required before mobilization. Paul + financeOPEN
R13 Aircon condenser placement refused or delayed
The server room has no exterior wall and facade mounting is prohibited in Grade A towers; no approved ledge/ACCU slot = no 24/7 cooling.
MH Written PMO request in W1 with a drawing (designated AC ledge / ACCU area, condensate stub-out); fallback: portable spot cooler venting to the return plenum + transfer fan — degraded but survivable at ~410 W typical load. PMO / landlordOPEN
R14 Budget FX drift
USD/PHP 61.62 on Jul 2, peso down ~9.3% YoY; the January ₱22,700/AP quote re-prices to ~₱23,800, and July forecasts reach 63.4.
HM Fixed-PHP PO with 30-day validity and a no-escalation clause locked by Jul 14; +5% contingency (~₱15,000) in the envelope; never pay USD direct (loses the VAT invoice too). FinanceMITIGATING
R15 Non-compliant installer (PCAB / ECE)
RA 4566 requires a PCAB licence above ₱50,000 contract value; the PMO can refuse gate passes mid-project; LV plans need ECE sign-and-seal under RA 9292.
MH Verify PCAB at pcab.construction.gov.ph before award, not after; ECE-signed electronics sheets included in the permit set; 3-quote tender keeps a compliant alternative warm. PaulMITIGATING
R16 Old-office cutover gap
The reused UCG-Fiber is both controller and gateway: its relocation day is the old office's WiFi death day; a botched migration strands both sites.
MM Pre-stage the new switch + APs in W4 via UniFi Site Manager; move the gateway last, on a weekend; config backups verified before unplugging anything. PaulMITIGATING
R17 Warranty / RMA gap
PH RMA runs 2–6 wk with no advance replacement; a single dead AP means a multi-week coverage hole in the open plan.
MM One cold-spare U7 Pro XGS (~₱23,000 VAT-inc) kept in the rack; all serials + purchase channel recorded in the handover pack; RMA turnaround asked in writing in the RFQ. PaulOPEN
R18 DFS radar hits (Mactan airport ~10 km)
Weather/ATC radar can force 60-second channel-evacuation outages on 5 GHz ch 52–144 — mid-call, without warning.
MM The four dense open-plan/reception APs anchored on non-DFS ch 36/44/149/157; DFS event log reviewed weekly for the first month. PaulMITIGATING
R19 6 GHz misconfiguration
PH opened only 5925–6425 MHz at 24 dBm (NTC MC 002-07-2024); a US-style 160/320 MHz plan cannot reuse across 7 APs and creates co-channel interference.
MM Console country = Philippines set before adoption; 6 GHz fixed at 80 MHz channels; one PH-market AP unbox-tested on arrival to confirm the country profile actually enables 6 GHz on shipping firmware. PaulMITIGATING
R20 DRAFT-02 layout drift
The floor plan is still a draft: partitions or the server room may move before the construction set, invalidating AP positions and cable lengths.
MM AP coordinates frozen only against the construction-issue drawings at the W2 site survey; predictive model re-run on any revision; AP-on-a-stick check at 3 positions before drilling. Paul + GCMITIGATING
R21 Server-room walls stop at the drop ceiling
A tile-lift bypass over the partition defeats the ₱25,000 access-control door protecting every piece of network gear.
MM 5-minute slab-to-slab visual check now while the grid is open; extend partition/steel mesh over ~9–10 lm (₱15,000–25,000) if short — near-free to check now, disruptive later. Fit-out GCOPEN
R22 Counterfeit / CCA "Cat6A" cable
Copper-clad-aluminium fakes are rampant on Lazada/Shopee; they fail Fluke certification and PoE thermal limits.
MM Solid pure-copper 23 AWG specified by brand in the PO; 100% Fluke DSX certification reports (PDF + .flw) per link as a condition of the 50% completion payment. InstallerMITIGATING
R23 PPSK fallback becomes permanent
If 802.1X procurement slips, 150 manually-managed keys accumulate — departed-employee keys are a real credential exposure for a cybersecurity company.
MM 802.1X EAP-TLS (Intune Cloud PKI + RadSec) remains the target with a dated migration plan; if PPSK launches, offboarding hook scripted via the UniFi API + quarterly key audit. Paul + XerxisOPEN
R24 Multi-tenant 2.4 GHz saturation
The tower's 2.4 GHz band is shared with every neighbouring tenant — congestion is guaranteed, not hypothetical.
HL 2.4 GHz enabled on only 3 of 7 APs (ch 1/6/11, low power); band steering to 5/6 GHz; the XGS dedicated spectral radios monitor interference continuously. PaulMITIGATING
R25 VRLA battery early death
Tropical ambient halves battery life: 2–3 yr real vs the 3–5 yr datasheet; runtime loss stays silent until the next outage.
HL Room held at 24–25 °C; monthly UPS self-test scheduled; replacement cartridge (₱6,000–12,000) calendared at month 30 in the maintenance plan. XerxisOPEN
R26 Lightning surge via mains
The Philippines has among the world's highest lightning flash densities; one induced surge can fry the gateway and switch together.
LH Three cascaded stages specified: Type 2 SPD at the tenant panel (₱10,000), UPS AVR, surge-rated rack PDU (₱2,500) + 14 mm² rack bonding; all Ethernet kept indoors, so no line-level exposure. MEP / electricianMITIGATING
R27 Typhoon-season delays
Jul–Oct is peak wet season in the Visayas; ISP aerial/riser work and deliveries lose days to weather.
ML Week 6 (Aug 10–14) held as pure schedule buffer; indoor works front-loaded; the 5G CPE decouples go-live from fiber weather entirely. PaulMITIGATING
R28 Input-VAT leakage
Grey/Shopee sellers who cannot issue a BIR-registered VAT sales invoice cost the full 12% (~₱36,000 on this BOM) under the EOPT Act.
ML PO clause: EOPT-compliant VAT sales invoice as a payment condition; supplier BIR 2303 on file; goods/services split into separate lines for correct EWT (1%/2%). FinanceMITIGATING
R29 WPA3-only strands legacy clients
Old Android (≤9) and older laptops misbehave on WPA3-Enterprise, and 6 GHz mandates WPA3 — no transition mode exists for Enterprise.
LM Fleet is modern managed Windows/Mac — test the actual devices before disabling WPA2 transition on guest; IoT SSID stays WPA2-PSK on 2.4 GHz. Paul + XerxisOPEN
R30 Building house-rule violations
Noisy work in occupied hours: stop-work, tool confiscation, ₱5,000/incident deducted from the bond; deliveries restricted to 6 PM–6 AM.
LL All drilling scheduled after-hours with work permits + pre-task plans filed 2 working days ahead; crew briefed at the building safety orientation; +25–50% night-labor premium already priced. InstallerMITIGATING

Scoring: likelihood and impact each graded H=3 / M=2 / L=1; rank = product. Critical = score 9. Statuses: MITIGATING = mitigation already scheduled or executed in the project plan; OPEN = requires a decision or third-party answer this month.

Kill criteria — when Aug 15 is formally declared missed

Checked at each Friday milestone review. Hitting a trigger does not stop the project — it switches the affected component to its fallback so the office still opens. The three standing fallbacks: 5G CPE day-one internet, temporary AP-on-stand coverage, and phased occupation of zones as drops land.

KC-1 · No lit-ISP fiber order by Fri Jul 10

If no order is placed with an ISP that already has building-entry facilities by Jul 10, fiber cannot land before Aug 15 (new-entrant access agreements alone run 4–8+ wk).
Fallback: declare fiber a post-move-in upgrade and go live on the Smart/Globe 5G CPE as the production WAN (UCG-Fiber WAN2) with per-client rate limits; keep both fiber applications alive and cut over whenever the winner lands.

KC-2 · No LV approval by Mon Jul 27 / ceiling closes unpulled

If the PMO has not approved the low-voltage sheets by Jul 27, or the grid closes with zero drops pulled, the in-ceiling window is lost and certified drops jump to 2–5× cost.
Fallback: conditional NTP under the GC's permit if negotiable; otherwise open with temporary AP-on-stand coverage (reused XGS + U-PoE++ injectors on surface-run cable) and phase occupation zone-by-zone as access-panel retrofit pulls complete after move-in.

KC-3 · Hardware not in Cebu by Fri Jul 31

If APs/switch are still on indent after Jul 31, the W4 build and W5 commissioning windows are gone — a 4+ wk indent confirmed at PO time triggers this early.
Fallback: swap the BOM at PO to in-stock alternates (U7 Pro / Pro Max APs, any 802.3bt PoE++ switch as a stopgap) so opening-day WiFi ships on time; XGS units follow as a phase-2 swap. Interim: 1 reused XGS on a stand covers reception + open-plan center.

KC-4 · No condenser slot approved by Fri Jul 17

Without a landlord-approved condenser location the split-type aircon misses the fit-out, and a sealed 4.97 sqm room cannot safely run ~600 W of IT 24/7.
Fallback: open with a portable spot cooler venting to the return plenum + the thermostat transfer fan and the brownout load-shed runbook; formally accept the degraded thermal posture at ~410 W typical, install the permanent split when approval lands, and hold the >30 °C alert as the tripwire.

KC-5 · Reused gateway fails its bench test (early Jul) or is trapped at the old office

A DOA UCG-Fiber — or an old office that cannot release it before cutover — removes the controller/gateway from the critical path items.
Fallback: buy a new UCG-Fiber (₱21,900 ex-VAT, inside the ~₱355,000 envelope) immediately; if the failure surfaces after Aug 1, adopt APs temporarily via UniFi Site Manager and execute the gateway cutover the first weekend after delivery. The old unit becomes the cold spare.

Heat map — likelihood × impact

Impact — Low
Impact — Medium
Impact — High
Likelihood
High
Score 3
R24R25
Score 6
R06R14
Score 9 — critical
R01R02R03R04R05
Likelihood
Medium
Score 2
R27R28
Likelihood
Low
Score 1
R30
Score 2
R29
Score 3
R26
critical (9) — kill-criteria territory high (6) — active management medium (3–4) — monitor + scheduled action low (1–2) — accept with hygiene controls

How this register is maintained

Review cadence

Re-scored at each Friday milestone review against the W1–W6 plan. A risk moves to mitigating only when its action has a date and an owner in the plan; it closes only when the trigger window has passed (e.g. R02 closes when the last certified drop lands before ceiling closure). Kill criteria KC-1…KC-5 are binary checks on their trigger dates — no judgment calls on the day.

Sources

Consolidated and deduplicated from the 7 round-1 expert briefs (hardware, RF, cabling, contractors, quote, architecture, timeline), the 5 round-2 gap experts (server-room MEP, customs/NTC, physical security, wired/AV, landlord), and the critic's 14 fold-in gaps. Costed mitigations reference the BOM and vendor pages; RF-specific risks (R18, R19, R24) are visualized on the coverage plan.