IRIIS (Nicola Tenant) - contract variation executed without the Risk artefacts, sufficient legal sign off, and non complaint with GI COP. Contract was supposed to be pulled from Docusign but wasn't. Needs an MA, IRP, PIA, EPSS, IRAT, BCM assessment. SOAPs require the Risks.