There are many risks! The most detrimental to your organisation are security and contract compliance risks as they have direct monetary penalties if an audit detects that you are non-compliant.