QBR Dashboard: Internal Review
Watchlist
9 items to raise in the meeting
Removable Media Policy
Review was due 05 Mar 2026 and has not been completed.
Remote Working Security Policy
Review was due 05 Feb 2026 and has not been completed.
Ransomware Attack
Residual score 20 remains high while open.
Unpatched Operating Systems
Residual score 16 remains high while open.
Phishing and Social Engineering
Residual score 15 remains high while open.
Insider data exfiltration
Reported 08 Aug 2026: Investigating (High severity).
GDPR subject access request breach
Reported 26 Jul 2026: Contained (High severity).
Patch deployment failure exposes vulnerability
Reported 20 Aug 2026: Open (Medium severity).
Unauthorised remote access attempt
Reported 11 Jul 2026: Contained (Medium severity).
Compliance
34% overall compliance rate (20 compliant / 19 partial / 0 non-compliant / 19 unknown of 58 requirements)
Policy Coverage
65% coverage (13 of 20 policies covered: 2 overdue, 2 missing)
Reviewed in Q4 2026 (0)
Risk Posture
19 open risks of 27 total (3 high residual, avg residual score: 7.6)
Reviewed in Q4 2026 (0)
Incident History
2 open of 5 total (2 critical/high severity, 1 closed)
Reported in Q4 2026 (0)