Risk & Resilience Posture Monitoring

Castellan Group — Live risk posture as of Dec 19, 2024 16:42 UTC

Risk-Adjusted Value at Stake
$287M
+18% vs Q3
Risk Appetite Breaches
7
+3 this month
Control Coverage Gap
23%
+5pp QoQ
Mitigation Effectiveness
68%
+4pp vs target
3rd Party Risk Index
142
High concentration
Resilience RTE (hrs)
18.2
Within SLA

Risk Domain Velocity Gauge Array

Cyber Security
8.7
Critical ↑
Regulatory
6.2
Elevated ↑
Operational
5.8
Elevated →
Financial
3.4
Moderate ↓
Strategic
4.1
Moderate →
Reputational
5.3
Elevated ↑
Third Party
6.9
Elevated ↑
Compliance
3.9
Moderate →

Risk Appetite Breach Timeline

Portfolio Exposure by Domain

Risk Register Heatmap — Impact × Likelihood

Very Low
Low
Medium
High
Very High
Critical
0
2
4
7
3
High
1
5
8
6
1
Medium
3
7
9
4
2
Low
6
11
5
3
1
Very Low
8
6
2
1
0

Mitigation Investment vs Effectiveness

Cyber Threat Exposure Delta (90d)

Regulatory Change Pipeline

EU DORA Compliance
Effective Jan 2025 • 47 days
Critical
SEC Climate Disclosure
Effective Q2 2025 • 134 days
High
APRA CPS 230 (AU)
Effective Jul 2025 • 211 days
High
UK Consumer Duty
Monitoring phase • 89 days
Medium

Reputational Risk Signal Velocity

Mitigation Program Tracker

Program Domain Budget Spend Risk Reduction Status
Zero Trust Architecture Cyber $4.2M $3.1M -$42M On Track
Vendor Risk Assessment Platform 3rd Party $1.8M $1.9M -$28M At Risk
DORA Readiness Initiative Regulatory $2.6M $2.1M -$65M Delayed
BCP/DR Modernization Operational $3.4M $2.8M -$38M On Track
ESG Disclosure Framework Reputational $1.2M $0.9M -$19M On Track
Financial Crime Controls Compliance $2.1M $1.7M -$31M On Track
Strategic Scenario Planning Strategic $0.8M $0.6M -$14M On Track
Insurance Coverage Gap Analysis Financial $0.5M $0.5M -$22M Complete

Risk Alert & Escalation Feed

Cyber: Credential compromise detected — 3rd party vendor
2 hours ago • Escalated to CISO
Regulatory: DORA gap assessment shows 23% control deficiency
6 hours ago • Action required
3rd Party: Tier 1 vendor scored 'High Risk' on renewal assessment
1 day ago • Escalated to CRO
Operational: Outage duration exceeded RTE threshold by 4.2 hrs
1 day ago • Review scheduled
Reputational: Social sentiment spike detected on ESG disclosure
2 days ago • Monitoring
Financial: Concentration limit breach — Commercial RE exposure
3 days ago • Mitigation in progress
Compliance: AML controls audit completed — No findings
4 days ago • Closed

Risk-Adjusted Capital Allocation