Open issues
0 overdue
Closed (6 mo)
0
to plan date
Recurring open
repeat findings
Control fail rate
0%
latest quarter
Root causes
3
active categories
Weakest performing entities
Ranked by the mean of control-weakness and issue-pressure scoring factors.
What these terms mean
Control weaknessHow far the controls meant to mitigate this entity are failing or untested.
Averages the latest test result across every linked control — fail 100, never tested 70, partial 60, pass 0 — weighting key controls double. A control with no test on record counts 50. An entity with no linked controls at all scores 60, because missing assurance is a gap rather than a clean result.
Example: Two linked controls — a key control that failed (100 x 2) and a non-key control that passed (0 x 1) — score (200 + 0) / 3 = 66.7, rounded to 67.
Issue pressureHow much unresolved audit history is weighing on this entity.
Adds up points across every linked issue. An open issue scores by severity (critical 40, high 25, moderate 12, low 5), plus 8 if it is past its due date and 6 if it is a repeat finding. An issue closed within the last year still carries a quarter of its severity points as residual signal; anything closed longer ago counts nothing. The total is capped at 100.
Example: One open CRITICAL issue that is overdue and a repeat finding scores 40 + 8 + 6 = 54. Add a HIGH issue closed three months ago (25 x 0.25 = 6.25) and the factor reaches 60.
| # | Entity | Domains | Control weakness | Issue pressure | Composite | Driver |
|---|---|---|---|---|---|---|
| 1 | Records Retention Programprogram | INTEGRATED | 100 | 18 | 59 | 1 of 1 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 2 | Cloud Infrastructure Programprogram | IT | 54 | 37 | 46 | 4 of 7 linked control(s) failed or partial on latest test. Key controls weighted double. |
| 3 | ESG Reporting Initiativeprogram | ADVISORY | 60 | 12 | 36 | No linked controls; assurance over mitigations is unassessed. |