Risk · RISK-012
Credential theft leading to privileged data access
Residual risk that a compromised privileged credential enables unauthorised access to protected payroll data.
Residual: Medium
- Inherent Risk
- High
- Residual Risk
- Medium
- Likelihood
- Possible
- Consequence
- Major
- Owner
- Risk Owner
- Status
- Awaiting Acceptance
Risk ReasoningFrom threat to residual position
PreviewThe inherent risk is High. Conditional Access and PIM reduce likelihood, but the MFA exclusion of break-glass accounts (MFA-004) and an open API vulnerability (VUL-014) prevent a Low residual. VERIDION proposes Medium residual, pending Risk Owner acceptance.
Contributing Controls & Findings
PreviewElements shaping this residual position.
ReferenceTypeEffect on Risk
Conditional AccessControlReduces likelihood
MFA-004ControlPartial — exclusions remain
VUL-014FindingIncreases exposure
PIM activationControlReduces standing access
Decision Path
PreviewHow this risk reaches an accountable decision.
- Assessor confirms the residual risk reasoning
- Risk Owner accepts, treats, or escalates the residual risk
- Decision recorded in the authorisation package with rationale
Demo workspace — detailed workflow coming next