QBR Dashboard: Internal Review
Watchlist
9 items to raise in the meeting
Removable Media Policy
Review was due 06 Jan 2026 and has not been completed.
Remote Working Security Policy
Review was due 06 Dec 2025 and has not been completed.
Ransomware Attack
Residual score 20 remains high while open.
Unpatched Operating Systems
Residual score 16 remains high while open.
Phishing and Social Engineering
Residual score 15 remains high while open.
Insider data exfiltration
Reported 01 Jul 2026: Investigating (High severity).
GDPR subject access request breach
Reported 18 Jun 2026: Contained (High severity).
Patch deployment failure exposes vulnerability
Reported 13 Jul 2026: Open (Medium severity).
Unauthorised remote access attempt
Reported 03 Jun 2026: Contained (Medium severity).
Compliance
34% overall compliance rate (20 compliant / 19 partial / 0 non-compliant / 19 unknown of 58 requirements)
Policy Coverage
65% coverage (13 of 20 policies covered: 2 overdue, 2 missing)
Reviewed in Q3 2026 (0)
Risk Posture
19 open risks of 27 total (3 high residual, avg residual score: 7.6)
Reviewed in Q3 2026 (0)
Incident History
2 open of 5 total (2 critical/high severity, 1 closed)
Reported in Q3 2026 (2)