Case Study: United Utilities strengthens third-party risk management with Risk Ledger

Using Risk Ledger to demonstrate compliance with NIS-D

United Utilities, a major UK water utility company, faced a time-consuming and manual third-party risk management (TPRM) process. They relied on sending lengthy spreadsheet-based questionnaires to suppliers, which took over a week to review per supplier and made compliance with the NIS-D directive difficult to demonstrate. This manual approach was burdensome for both their own team and their suppliers.

By implementing Risk Ledger's platform, United Utilities automated its TPRM programme. The solution provided a centralized system for supplier assessments, drastically reducing review times and enabling continuous monitoring. Risk Ledger delivered significant time savings, streamlined compliance reporting for NIS-D, and improved supplier engagement by eliminating duplicate questionnaires. The utility now plans to integrate Risk Ledger into its tender process and expand its use to other departments.

United Utilities