ITGC — FY 2024 Q3
Security Audit Dashboard
Acme Corp · IT General Controls testing — SOX / SOC 2 / ISO 27001 · Engagement period: Jul 1 – Sep 30, 2024
89
Controls Tested
12 added this quarter
23
Vulnerabilities Found
4 new since last scan
4
Critical Issues
Requires immediate remediation
71%
Remediated
Up from 58% last quarter
Security Controls Register
89 controls across SOX · SOC 2 · ISO 27001 frameworks
Control ID Control Name Framework Domain Status Last Tested Findings
Vulnerabilities by Severity
23 total findings across all controls
Critical (4)
High (8)
Medium (7)
Low (4)
Remediation Trend — 90 Days
Open vs. remediated vulnerabilities over time
Vulnerability Tracker
Severity × remediation status matrix
Severity Open In Progress Remediated Accepted
Critical 2 1 1 0
High 3 2 3 0
Medium 1 2 4 0
Low 0 1 3 0
6
Open
6
In Progress
11
Remediated
0
Accepted
ITGC Domain Status
Acme Corp — IT General Controls progress
Access Management
User provisioning · Privileged access · MFA enforcement · Quarterly recertification
In Progress
68%
22 of 32 controls effective · 3 deficiencies open
Change Management
SDLC controls · Segregation of duties · Emergency changes · Approval workflows
Effective
88%
29 of 33 controls effective · 1 minor deficiency
Computer Operations
Backup & recovery · Incident response · Patch management · Monitoring & alerting
In Review
79%
19 of 24 controls effective · 2 items under review
Detail