Audit Planning & Assurance Intelligence

117 days old as of 2026-07-01

Chat workspace launched without DLP policies; remediated with policy rollout.

Cited control

ctl-031 · PREVENTIVE · CONTINUOUS

PARTIAL

tested 2026-03-20

This issue records a CDA failure, shown first.

Procedures evaluating whether the control is designed adequately.

1.Obtain and read the DLP policy configuration; confirm classified-data patterns are defined and mapped to block or quarantine actions.
2.Confirm DLP coverage extends to all collaboration channels in use (email, chat, file sharing), not only email.

Procedures evaluating whether the control operated over the testing period.

1.Attempt to share a test file containing classified-data patterns through a covered channel and confirm it is blocked or quarantined.
2.Select 25 quarantined events from the period and confirm each was reviewed and dispositioned.
3.Review DLP policy change logs to confirm no unauthorized weakening occurred during the period.

Same root cause or a shared entity

Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.

Cloud Email & Collaboration Suite6.25 of 6.25 pts
100% of this entity’s issue pressure
Annual priority score: 40 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- Closed within the year, residual signal: 25 x 0.25 = 6.25