IT & Cybersecurity Audit Risk Exposure

Nexvera Financial Services • FY2024 IT Audit Cycle • $28B AUM

LAST UPDATED
Dec 31, 2024
Critical CVE SLA
88.3%
-7.7% YTD
Tier 1 MTTR (Days)
34
+12 from Q1
NIST CSF Score
3.0
+0.2 YoY
PAR Completion
97.4%
Avg 7 campaigns
Control Coverage
94.2%
+3.1% YTD
Vendor Risk Avg
7.8/10
3 critical vendors

NIST CSF Domain Maturity

Current vs. Prior Year • Target ≥3.2 Aggregate

⚠ Alert: Detect Domain Below Threshold
NIST CSF Detect scored 2.3/5.0, below 2.5 minimum. SIEM coverage gaps and delayed log aggregation identified.

CVE Remediation Trend

SLA Compliance by Severity • 90 Days

Asset Criticality Distribution

Vulnerability Exposure by Tier

Mean Time to Remediate by Tier

Average Days • Quarterly Trend

Security Control Testing Coverage

Completion Rate by Control Domain

Active Critical Findings

Remediation Status & SLA Tracking

Finding ID System Asset Tier Framework Severity Age (Days) SLA Remain Status
CVE-2024-8371 Exchange Server Cluster Tier 1 NIST CSF Critical 47 -26d Patch Testing
CVE-2024-7392 Core Banking DB Tier 1 PCI-DSS Critical 38 -17d Awaiting Change Board
FW-2024-0891 Perimeter Firewall Tier 1 SOC 2 High 29 1d Rule Review
IAM-2024-0453 Privileged Access Mgmt Tier 1 NIST CSF High 22 8d Remediation In Progress
CVE-2024-6281 Web Application Gateway Tier 2 OWASP Critical 19 11d Patch Deployed - Validation
NET-2024-1124 Internal DNS Tier 2 NIST CSF High 16 14d Config Review
APP-2024-0712 Customer Portal Tier 2 SOC 2 Medium 11 34d Code Fix In Dev
CVE-2024-5129 VPN Concentrator Tier 1 ISO 27001 Critical 8 13d Vendor Patch Pending

Regulatory Citation Rate

By Framework

Top Vendor Risk Scores

SecurityScorecard • /10

CloudCorp SaaS 6.2
DataVendor Inc 7.8
TechPartner Ltd 8.4
SecureCloud Global 5.9

IR Drill Completion

Scenario Coverage

100%
4/4 Drills Completed
Ransomware Response
Data Breach Notification
Insider Threat
DDoS Attack

Vulnerability Remediation Pipeline

12-Week Rolling Window • New vs. Closed CVEs