Every open risk, ranked — and the board-ready story behind it.

The app surfaces findings as scattered alerts. This page ranks them into a single governance ledger and rolls the posture up into a document the board and auditors can read in one sitting.

High

Severity · needs action.

Medium

Severity · monitor.

Low

Severity · informational.

Open

Status · unmitigated.

Mitigating

Status · in progress.

Accepted

Status · risk owned.

Risk Register

Ranked by severity — the single ledger of record.

#FindingSeverityOwnerStatus$ ExposureAge

1PII flowing to unapproved LLM (support-copilot → Gemini)HighSecurityOpen$— reputational2d

2Ungoverned unowned agent marketing-gpt → OpenAIHighPlatformOpen$— regulatory1d

3Egress default-allow org-wideHighSecurityMitigating$— systemic14d

4Stale credentials on data-pipeline-agent (>90d)MediumEngineeringOpen$18k9d

5Sensor gaps — 2 clusters unmonitoredMediumPlatformMitigating$12k6d

6data-pipeline-agent 28% over $9k spend ceilingMediumFinanceOpen$2.5k4d

7Missing owner-before-egress policyLowComplianceOpen$—21d

8Legacy egress allow-rule retained (accepted)LowSecurityAccepted$—40d

Two High findings remain Open — top-ranked risk has no dollar figure (reputational/regulatory exposure) and feeds the board recommendation below.

Board Report — Export Preview

Confidential · Board pack

Agent Governance — Board Report

June 2026

Headline posture

Governance index 72 / 100, +4 WoW. Posture improving but two High risks remain open.

Top risks

PII flowing to an unapproved LLM via support-copilot.
Ungoverned, unowned agent marketing-gpt calling OpenAI.
Egress is default-allow org-wide (mitigation in progress).

Spend

$42.8k / $50k MTD; forecast $49.6k — tracking near the ceiling.

Coverage

32 / 38 agents governed; 2 sensor gaps reducing visibility.

Recommendation

Move egress to default-deny; assign owners to 6 ungoverned agents.

Last generated 6 days ago