CIO Dashboard/Risk & Compliance
Risk & Compliance View
Risk register, compliance posture, change success rate, and audit readiness
Last updated: 13 May 2026, 07:45 IST
4 critical risks unmitigated
Open Risks
23
4 Critical · 8 High · 11 Medium
15% vs last week
3 pts below target
Compliance Score
87 / 100
Target: 90 — below threshold
3% vs last month
Change Success Rate
91.4%
64 of 70 changes successful
2% vs last month
Rollback rate elevated
Failed Deployments
6
3 required rollback
50% vs last month
Audit Items Due
11
3 overdue · 8 due this month
0% unchanged
Risk by Severity
Open risks — current snapshot
Compliance Score Trend
Weekly compliance score — last 12 weeks
Change Success Rate
Successful vs failed changes — by week
Risk Register
All open and in-progress risks — sorted by severity and impact
Filter:11 risks shown
| Risk ID | Application | Title | Category | Severity | Status | Likelihood | Impact | Owner | Target Date | |
|---|---|---|---|---|---|---|---|---|---|---|
| RSK-0441 | Payments Gateway | PCI-DSS audit gap — tokenisation non-compliant | Security | Critical | Open | High | High | Rajan Pillai | 31 May 2026 | |
| RSK-0438 | Claims Portal | Data residency violation — EU claim data stored in IN-W | Regulatory | Critical | In Progress | High | High | Priya Mehta | 20 May 2026 | |
| RSK-0435 | Underwriting Engine | Model explainability gap — AI decisions not auditable | Regulatory | Critical | Open | Medium | High | Deepika Iyer | 30 Jun 2026 | |
| RSK-0431 | Policy Management | Single point of failure — PDF service has no failover | Availability | Critical | In Progress | High | High | Ananya Sharma | 25 May 2026 | |
| RSK-0428 | Customer 360 | Third-party API rate limit — Aadhaar eKYC throttling | Integration | High | In Progress | High | Medium | Vikram Nair | 15 Jun 2026 | |
| RSK-0424 | Agent Portal | Privilege escalation vulnerability in role management | Security | High | Open | Medium | High | Suresh Kumar | 20 May 2026 | |
| RSK-0420 | Reinsurance Hub | Data integrity risk — cedant reconciliation discrepancies | Operational | High | In Progress | Medium | High | Meera Balakrishnan | 31 May 2026 | |
| RSK-0417 | Claims Portal | Dependency on EOL library — Spring Boot 2.7 in claims core | Technical | High | Open | Low | High | Priya Mehta | 30 Jun 2026 | |
| RSK-0414 | Payments Gateway | Insufficient load testing — peak traffic simulation gap | Performance | Medium | Open | Medium | Medium | Rajan Pillai | 20 Jun 2026 | |
| RSK-0411 | Agent Portal | MFA not enforced for admin accounts in non-prod environments | Security | Medium | In Progress | Low | Medium | Suresh Kumar | 15 May 2026 | |
| RSK-0408 | Customer 360 | Consent management logs not retained for 7-year period | Regulatory | Medium | Open | Medium | Medium | Vikram Nair | 30 Jun 2026 |