Assurance Overview
Payroll Processing Platform
Security Authorisation Assessment
PROTECTEDAssessment in Progress
Overall Assurance
Partially Ready
The system demonstrates broadly effective security, with a small number of material findings requiring judgement before an authorisation package can be finalised.
Overall Residual Risk
Medium
Status
Assessment in Progress
91%
Assurance Confidence
Weighted across evidence quality, coverage and freshness.
Completeness
92%
Critical Blockers
0
Material Risks
3
Applicable Assurance Objects
743
716 assessed · 62 pending
Effective
681
Partially Effective
27
Ineffective
8
Findings
18
Awaiting Evidence
9
Attention Required5 items ranked by assurance impact
- HIGHMFA-004Emergency administrator accounts excluded from MFA2 affected accountsReview Assessment
- HIGHCHG-021API endpoint became internet accessibleChange detected 09:42 · 12 assurance objects affectedView Impact
- MEDIUMEVD-087Privileged access review evidence approaching expiryEvidence age: 87 daysReview Evidence
- MEDIUMVUL-014High-severity vulnerability remains unresolvedAzure APIView Finding
- LOWISM-0417Insufficient evidence to determine control effectivenessPrivileged access lifecycleRequest Evidence
Assessment ProgressAuthorisation readiness by phase
System Understanding100%
Control Applicability100%
Evidence Collection92%
Control Assessment88%
Risk Assessment84%
Authorisation Package63%
Assurance by DomainEffectiveness across control domains
- Identity & Access Management94%
- Data Protection91%
- Logging & Monitoring96%
- Network Security87%
- Vulnerability Management82%
- Incident Response89%
Recent Assurance ActivityToday
- 09:42Change detected
Azure API endpoint changed from Private to Internet Accessible
- 09:43Impact analysis completed
12 assurance objects identified for targeted reassessment
- 10:17Evidence verified
Conditional Access policy export
- 11:03Assessment updated
ISM privileged access control → Partially Effective
- 11:21Human decision requested
Risk Owner review required
Human DecisionsAI proposes · Humans decide
- Security Assessor7 awaiting judgement7
- Risk Owner3 awaiting acceptance3
- System Owner5 treatment decisions5
- Authorising Officer1 authorisation package ready1