- Severity
- MODERATE
- Status
- OPEN
- Owner
- Digital Channels
- Root cause
- Process gap
- Test failure
- Operating effectiveness (COE)
- Opened
- 2025-10-25
- Due
- 2026-04-30
- Closed
- —
249 days old as of 2026-07-01OverdueRepeat
Two medium mobile findings remain open past agreed remediation dates.
PARTIAL
tested 2025-10-20
This issue records a COE failure, shown first.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
- 1.Confirm a penetration test was completed within the last 12 months by a party independent of the development team.
- 2.Select the findings from the latest test and confirm remediation status is tracked to closure.
- 3.Confirm high and critical findings were remediated or risk-accepted within the defined timeline.
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
- 1.Obtain and read the penetration testing procedure; confirm it requires an independent tester and defines the annual cadence and scope.
- 2.Confirm the defined scope includes both iOS and Android channels.
Related issues
Same root cause or a shared entity
- Payment reconciliation breaks aged beyond SLACOEHIGH
- EUC inventory staleCOEMODERATE
- Critical patch SLA misses on internet-facing serversCOECRITICAL
- Manual payment workarounds undocumentedMODERATE
- Mobile session timeout inconsistencyCDAMODERATE
Score contribution
Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.
- Mobile Banking App26 of 92 pts
28.3% of this entity’s issue pressure
Annual priority score: 57 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- MODERATE severity: 12
- Overdue: +8
- Repeat finding: +6
Linked entities
- Mobile Banking App
APPLICATION · CRITICAL