Integrated Risk Management System (IRMS) · Stakeholder Status Update
May 27, 2026
OVERALL STATUS
Project Status:
ON TRACK
Phase 1 (Align / Planning) is complete. Phase 2 (Solution / Discovery) and Phase 3 (Build) are in progress. Discovery sessions are ongoing through June 3, covering Audit Lifecycle, Issues and Actions, and KRI scope. Risk Form and Control Form PoC development completed May 12. Proof of Concept (PoC) build is well underway with a confirmed demo scheduled for June 4, 2026. A KRI capability scope discussion is scheduled for May 29, 2026. No data uploads (risks, controls) will occur during implementation per sponsor decision.Go-Live target date: July 10, 2026.
MAJOR ACTIVITIES
✔ COMPLETED
Proof of Concept Development
• Workiva Pen-Test Reports completed (5/12)• GRC Workspace Risk Form: PoC development complete (5/12)
• GRC Workspace Control Form: PoC development complete (5/12)
Discovery Sessions
• Issues & Actions discovery session (5/20 + 5/27 follow-up)• Audit Lifecycle sessions (5/22, 5/26)
• Architecture/Network Diagram information provided to TxDOT
• Compliance Manager credentials and walkthrough completed
▶ UPCOMING
Discovery Sessions
• [5/27] Issues and Actions Continued• [5/29] Audit Lifecycle
• [6/8] Reporting and Dashboards
Discussions
• [5/29] KRI Scope and Next Steps
Proof of Concept Development
• Audit Template: updating field names• Issues Form: in progress
• PoC demo to TxDOT (6/4)
• Workpaper Templates: to be scheduled (contingent on Audit Lifecycle finalization)
Integration / Setup
• Tableau integration (API): TxDOT to connect w/ MuleSoft team for Udit (ZenAtikin)’s access
MAJOR MILESTONES
| # | Deliverable / Milestone | Owner | Start | Target | % Done | Status |
|---|---|---|---|---|---|---|
| 1. | Phase 1: Align / Planning | ZenAtikin / TxDOT | 4/07/26 | 4/24/26 | 100% |
Complete |
| 2. | Project Schedule & Organization | Vendor PM / TxDOT PM | 4/07/26 | 4/17/26 | 100% |
Complete |
| 3. | AI Review Board Approval | Vendor PM / TxDOT PM | 4/30/26 | 5/01/26 | 100% |
Complete |
| 4. | Phase 2: Solution Discovery & Design / SRD | ZenAtikin / TxDOT | 4/14/26 | 6/26/26 | 78% |
In Progress |
| 5. | Proof of Concept (PoC) Build & Walkthrough | ZenAtikin SA | 6/01/26 | 6/04/26 | 65% |
In Progress |
| 6. | ARB3 | TxDOT TPO / ARB | 6/01/26 | 6/05/26 | 0% |
Not Started |
| 7. | ATO Preparation | TxDOT TPO / InfoSec | 4/14/26 | 6/26/26 | 10% |
In Progress |
| 9. | Phase 3: Build & QA | ZenAtikin SA / Dev | 5/25/26 | 7/10/26 | 5% |
In Progress |
| 10. | Phase 4: UAT & System Acceptance | ZenAtikin / TxDOT | 6/29/26 | 7/09/26 | 0% |
Not Started |
| 11. | Pre-CAB & CAB Meeting | TxDOT PM / TPO | 6/08/26 | 7/03/26 | 0% |
Not Started |
| 12. | Phase 5: Go-Live | ZenAtikin / TxDOT | 7/10/26 | 7/10/26 | 0% |
Not Started |
| 13. | Hypercare | ZenAtikin / TxDOT | 7/10/26 | 8/14/26 | 0% |
Not Started |
| 14. | Project Closure Activities | Paula Perreira | 8/17/26 | 9/30/26 | 0% |
Not Started |
INDICATORS:
On Track / In Progress
At Risk
Off Track
Not Started
Complete
RAID: Risks · Actions · Issues · Decisions
⚠ Risks
No active risks recorded.
✔ Actions
TxDOT (Pending): Confirm alignment of risk and control fields across GRC and other workspaces. Confirm whether a risk-of-failure field on controls is needed. Connect w/ MuleSoft team for Udit (ZenAtikin)’s Tableau API access.
⚑ Issues
#1 (Open) – KRI Capability Gap (5/15/2026): Workiva currently supports manual KRI entry only; automated monitoring required per contract. Meeting scheduled 5/29 to review contract interpretation, assess scope, and discuss change request. Owner: Jonathan, Tiffany.
✦ Decisions
PoC demo confirmed 6/4. No data uploads (risks, controls) per sponsor decision. TxDOT AI Governance Board approval confirmed. AI functionality enabled by TxDOT.