Risk Management very light
No reference in the Surrey paper to the risk of late delivery! Must have been covered by iron clad T&C or been totally impossible. T&C of course are only good if its clear who is actually responsible for the delay / breach of which there is never ever any dispute.
As we know public IT procurement is so well know for on time delivery.
Time to save some money and make Surrey a unitary authority. But that's another project to mismanage.