GRC Oversight

Live demoFictional sample data. Nothing is saved.

Sign up

12Compliance

Security Posture Report: Q2 2026

Northwind Robotics · Generated 7/1/2026, 5:00:00 AM

At a glance

Control readiness

81%

4 framework(s)

Open findings

9

1 critical, 3 high

Risk register

14

avg residual score 6.2

Open incidents

1

2 resolved in last 90 days

Vendor SOC 2 gaps

3

4 expiring/expired · 23 vendors

Training compliance

88%

1 overdue

Device fleet compliance

94%

34 devices

AI systems (high risk)

1

4 systems tracked

Control health by framework

FrameworkReadinessPassFailControls
SOC 2 Type II82%41950
ISO 2700176%351146
GDPR91%20222
HIPAA64%181028

Top open findings

  • S3 bucket 'nw-backups' allows public readCRITICAL · 2026-06-28
  • 5 endpoints missing disk encryptionHIGH · 2026-06-24
  • Vendor 'DataPipe Analytics' SOC 2 report expiredHIGH · 2026-06-15
  • Quarterly access review overdue for Finance appMEDIUM · 2026-06-10

Risk register

8 open · 4 mitigating · 2 accepted

  • Unencrypted backups exposed to internetOPEN · residual 12 / inherent 20
  • Lost device data exposureMITIGATING · residual 8 / inherent 16
  • Unvetted subprocessor riskOPEN · residual 9 / inherent 15

Vendor risk

5 critical · 7 high · 8 medium · 3 low · 3 without a SOC 2 report on file · 4 expiring within 30 days or expired