Open issues
Closed (6 mo)
to plan date
Recurring open
repeat findings
Control fail rate
0%
latest quarter
Root causes
9
active categories
Weakest performing entities
Ranked by the mean of control-weakness and issue-pressure scoring factors.
What these terms mean
Control weaknessHow far the controls meant to mitigate this entity are failing or untested.
Averages the latest test result across every linked control — fail 100, never tested 70, partial 60, pass 0 — weighting key controls double. A control with no test on record counts 50. An entity with no linked controls at all scores 60, because missing assurance is a gap rather than a clean result.
Example: Two linked controls — a key control that failed (100 x 2) and a non-key control that passed (0 x 1) — score (200 + 0) / 3 = 66.7, rounded to 67.
Issue pressureHow much unresolved audit history is weighing on this entity.
Adds up points across every linked issue. An open issue scores by severity (critical 40, high 25, moderate 12, low 5), plus 8 if it is past its due date and 6 if it is a repeat finding. An issue closed within the last year still carries a quarter of its severity points as residual signal; anything closed longer ago counts nothing. The total is capped at 100.
Example: One open CRITICAL issue that is overdue and a repeat finding scores 40 + 8 + 6 = 54. Add a HIGH issue closed three months ago (25 x 0.25 = 6.25) and the factor reaches 60.
| # | Entity | Domains | Control weakness | Issue pressure | Composite | Driver |
|---|---|---|---|---|---|---|
| 1 | Mobile Banking Appapplication | IT | 43 | 92 | 68 | 4 of 7 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 2 | Enterprise IAM Platformapplication | IT, INTEGRATED | 45 | 79 | 62 | 4 of 8 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 3 | Records Retention Programprogram | INTEGRATED | 100 | 18 | 59 | 1 of 1 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 4 | Customer Data Domaindata domain | IT, INTEGRATED | 60 | 51 | 56 | 3 of 5 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 5 | Generative AI Knowledge Assistantai use case | ADVISORY, IT | 73 | 37 | 55 | 4 of 5 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 6 | Marketing Analytics Platformapplication | IT, ADVISORY | 100 | 0 | 50 | 1 of 1 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 7 | Cloud Infrastructure Programprogram | IT | 54 | 37 | 46 | 4 of 7 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 8 | Managed Security Services Providervendor | IT | 53 | 39 | 46 | 2 of 4 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 9 | Data Center Operationslocation | IT | 30 | 55 | 43 | 1 of 3 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 10 | Regulatory Reportingprocess | OPS, INTEGRATED | 40 | 44 | 42 | 3 of 5 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 11 | Customer Contact Centerbusiness unit | OPS | 60 | 18 | 39 | 1 of 1 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 12 | Credit Decisioning Modelai use case | ADVISORY, INTEGRATED | 33 | 45 | 39 | 1 of 3 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 13 | ESG Reporting Initiativeprogram | ADVISORY | 60 | 12 | 36 | No linked controls; assurance over mitigations is unassessed. |
| 14 | Digital Onboarding Journeyprocess | IT, OPS | 47 | 25 | 36 | 4 of 6 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 15 | Payment Operationsprocess | OPS, INTEGRATED | 17 | 51 | 34 | 1 of 4 linked control(s) failed or partial on latest test. Key controls weighted double. |