Control inventory (NIST SP 800-53 mapping) 10 records ref title family owner status last tested SI-2 Flaw Remediation System & Info Integrity VulnMgmt – K. Novak Not Tested — SC-8 Transmission Confidentiality System & Comms Protection Network Eng – T. Brooks Not Tested — RA-5 Vulnerability Monitoring & Scanning Risk Assessment VulnMgmt – K. Novak Not Tested — IR-4 Incident Handling Incident Response SOC – M. Chen Not Tested — IA-2 Multi-Factor Authentication Identification & Auth IAM Team – A. Patel Not Tested — CP-9 System Backup Contingency Planning Infra Ops – L. Okafor Not Tested — CM-3 Configuration Change Control Configuration Mgmt Platform Eng – R. Diaz Not Tested — AU-6 Audit Record Review Audit & Accountability SOC – M. Chen Not Tested — AC-6 Least Privilege Access Control IAM Team – A. Patel Not Tested — AC-2 Account Management Access Control IAM Team – A. Patel Not Tested —
Findings / issues 0 records title severity risk score source status No records yet
Remediation & POA&M 0 records title owner due date severity status Actions No records yet
Enterprise risk register 3 records title category likelihood impact rating treatment status Critical vendor concentration Third-Party 2 5 Medium Transfer Open Unapproved production changes Technology 3 4 Medium Mitigate Open Orphaned privileged accounts Cybersecurity 4 4 High Mitigate Open
Control assessments 0 records control ref result notes created at No records yet
Policies 3 records title version owner acknowledgments status Third-Party Risk Policy 1.3 Procurement 0 Published Acceptable Use Policy 2.1 HR & Security 0 Published Information Security Policy 4.2 CISO Office 0 Published
Policy exceptions 0 records policy justification duration days status expires No records yet
Compliance obligations 2 records title framework owner status Annual risk assessment GLBA Safeguards (summary) CISO Office Mapped Maintain MFA for remote access NYDFS (summary) IAM Team Mapped
Attestations 0 records control ref attester status No records yet
Risk scoring configuration 1 records name likelihood weight impact weight critical threshold high threshold medium threshold Actions Default enterprise scoring 1 1 20 12 6 Edit rules