Risk register
Total identifed risks: 20
of identified risks are mitigated, transfered or accepted.
Mitigated
13
Transferred
2
Accepted
5
Monitoring Status
| Item | Description | Frequency | Status | Automated |
|---|---|---|---|---|
 Compliant Devices Last updated: 13 Aug 2026 | Devices are continuously monitored for compliance with security policies. | Daily | 86% | |
 MFA Coverage Last updated: 13 Aug 2026 | Percentage of registered members with Multi-Factor Authentication enabled. | Daily | 100% | |
 Identity Logging Last updated: 13 Aug 2026 | Continuous audit log monitoring for identity events and sign-ins. | Daily | OK | |
 Directory Audit Logging Last updated: 13 Aug 2026 | Continuous directory audit log monitoring for administrative actions. | Daily | OK | |
 Automated Backup Last updated: 12 Aug 2026 | Data critical to business is safely preserved according to 3-2-1 backup strategy. Reliability is measured over the past 7 days. | Daily | 100% | |
 Network Security Last updated: 13 Aug 2026 | Wi-Fi networks are configured with state-of-the-art WPA3 encryption. | Daily | OK | |
 ISMS Policies Last updated: 29 Jul 2026 | All policies are reviewed at least once a year. | Annual | OK | |
 Risk Assessment & Treatment Last updated: 29 Jul 2026 | All identified risks are either mitigated, transferred or accepted. | Annual | OK | |
 Vendor Management Last updated: 15 May 2026 | Vendors security posture is assessed prior to onboarding and periodically reviewed. | Quarterly | Overdue | |
 IAM Reviews Last updated: 1 Jul 2026 | Principle of least privilege is enforced. IAM is actively reviewed, and excessive access is revoked. | Quarterly | OK | |
 Physical Security Last updated: 1 Jul 2026 | Physical access to office premises is strictly controlled and monitored to prevent unauthorized entry. | Quarterly | OK | |
 Incident Management Last updated: 1 Jul 2026 | No security incidents have been reported in the last quarter. | Quarterly | OK |