Risk Heat Map

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Impact → ← Likelihood

Compliance Status

ISO 27001

Information Security

Compliant
GDPR

Data Protection

Compliant
SOC 2 Type II

Security Controls

Review Due
Basel III

Capital Requirements

3 Gaps

Audit Findings

Access Control Deficiency
Jan 15, 2026 High Priority
Due: Feb 15
Documentation Gap
Jan 12, 2026 Medium Priority
Due: Mar 12
Policy Update Complete
Jan 10, 2026 Closed
Completed

Regulatory Deadlines

Q4 2025 Regulatory Report

Submitted: January 5, 2026

Annual Risk Assessment

Due: February 28, 2026

Board GRC Report

Due: March 15, 2026

Vendor Risk Review

Overdue: January 31, 2026

Top 5 Risks

1. Cybersecurity Threat Critical
2. Regulatory Change High
3. Third Party Risk High
4. Operational Resilience Medium
5. Data Privacy Medium

KRI/KPI Dashboard

Policy Acknowledgment Rate
96.5%
Target: 95%
Incident Response Time
4.2 hrs
Target: <4 hrs
Training Completion
98.2%
Target: 95%
Open High Risks
12
Target: <10