Board viewSample data
Exposure across business domains and control areas
Each cell is a composite 0 to 100 exposure score. Tags identify whether the driver is a weak control (CTRL) or missing or stale evidence (EVD). Deltas compare to prior quarter close.
Exposure index
55
Mean of all 40 cell scores. Equals the table grand mean. Higher means more exposure.
High-risk cells
15
Score ≥ 60 across 40 cells
Overdue evidence
11
Missing, stale, or past deadline
Unowned controls
5
No accountable owner assigned
Exception register · top 3
Sorted by exposure
- Credit decisioning · TestingDisparate impact testing on protected classes not completed for Q2 retraining cycle.M. Alvarez, Model Risk25d overdue
- HR screening · DocumentationIndependent bias audit report not on file for current vendor model version.Unassigned54d overdue
- Credit decisioning · DocumentationModel validation report from independent validation unit not produced for current version.Unassigned40d overdue
Sort rows
| Domain \ Control | Policy | Access | Testing | Monitoring | Human Oversight | Documentation | Third Party | Incident Response | Row mean |
|---|---|---|---|---|---|---|---|---|---|
Customer LLM 2 overdue | 50 | ||||||||
Credit decisioning 3 overdue | 64 | ||||||||
HR screening 3 overdue | 66 | ||||||||
Vendor model 2 overdue | 57 | ||||||||
Infra automation 1 overdue | 40 | ||||||||
| Column mean | 48 | 36 | 71 | 62 | 57 | 62 | 59 | 46 | 55 |
BandsLow 0 to 39Elevated 40 to 59High 60 to 79Critical 80 to 100
DriverCTRL weak controlEVD missing or stale evidence
Delta▲n worsened vs prior quarter▼n improved