- Severity
- LOW
- Status
- CLOSED
- Owner
- Corporate Services
- Root cause
- Access management
- Test failure
- Operating effectiveness (COE)
- Opened
- 2025-07-18
- Due
- 2026-01-31
- Closed
- 2025-12-19
154 days old as of 2026-07-01
Terminated contractor badges remained active; review cadence tightened.
PASS
tested 2026-04-15
This issue records a COE failure, shown first.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
- 1.Select 25 badge holders with secure-area access and confirm each was reviewed within the quarter.
- 2.Confirm access flagged for removal during review was revoked.
- 3.Confirm terminated employees' badges were deactivated within the defined SLA.
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
- 1.Obtain and read the badge-review procedure; confirm it defines the secure-area population in scope and the quarterly review cadence.
- 2.Confirm reviewer independence from the individuals whose badge access is being reviewed.
Related issues
Same root cause or a shared entity
Score contribution
Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.
- Data Center Operations1.25 of 55.25 pts
2.3% of this entity’s issue pressure
Annual priority score: 35 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- Closed within the year, residual signal: 5 x 0.25 = 1.25
Linked entities
- Data Center Operations
LOCATION · HIGH