2 critical · 1 time-bound acceptance
Synthetic portfolio · interactive filters · no customer data
See risk.
Move work.
CONTROL VIEW
Move from portfolio signal to accountable work.
Showing 12 of 12 synthetic exposure records · snapshot Aug 18, 2026. Active and accepted work remains visible across activity windows; remediated work uses its closure date.
Within the selected synthetic view
4 more due within 14 days
Waiting on newer evidence
Modeled person-hours, not a forecast
Illustrative weighted-risk movement
RISK COMPOSITION
Active records by severityWhat needs attention now.
Critical2
High3
Medium2
Low0
REMEDIATION MOMENTUM
Illustrative eight-week flowWork closed versus opened.
Jun
29
Jul
06
Jul
13
Jul
20
Jul
27
Aug
03
Aug
10
Aug
17
- Jun 29: 4 opened and 1 closed.
- Jul 06: 3 opened and 2 closed.
- Jul 13: 5 opened and 2 closed.
- Jul 20: 2 opened and 4 closed.
- Jul 27: 4 opened and 3 closed.
- Aug 03: 3 opened and 4 closed.
- Aug 10: 2 opened and 5 closed.
- Aug 17: 1 opened and 3 closed.
Opened Closed
CONTROL PIPELINE
Where the work is now.
- 01At risk2
- 02In remediation2
- 03Validation2
- 04Remediated5
- 05Risk accepted1
IMPACTED SERVICES
Exposure concentration.
Creative Studio1
Customer Support1
Decision Analytics1
Digital Checkout1
Document Exchange1
ACCOUNTABLE WORK REGISTER
From executive signal to system-level detail.
Select any exposure to inspect its owner, impact, action, effort, and validation evidence.
Scroll the register horizontally on smaller screens.
| Exposure | Severity | Status | System / service | Team | Target | Progress | Inspect |
|---|---|---|---|---|---|---|---|
| EXP-1031 · P0Analytics archive permitted public object listing | Critical | Remediated | analytics-archive-simDecision Analytics | Data PlatformPriya D. | Jul 19, 2026 | 100% | |
| EXP-1018 · P0Container runtime administrative port exposed | Critical | Validation | fulfillment-cluster-simOrder Fulfillment | Cloud PlatformAndre L. | Aug 18, 2026 | 94% | |
| EXP-1042 · P0Internet-facing checkout API package exposure | Critical | In remediation | checkout-api-prodDigital Checkout | Payments PlatformSofia M. | Aug 20, 2026 | 68% | |
| EXP-1011 · P1Unrestricted egress from document conversion worker | High | Remediated | document-worker-simDocument Exchange | Cloud PlatformAndre L. | Jul 3, 2026 | 100% | |
| EXP-1027 · P1Server-side request forgery dependency path | High | Remediated | supplier-portalSupplier Management | Business ApplicationsNoah T. | Jul 25, 2026 | 100% | |
| EXP-1035 · P1Unsupported TLS library on field endpoints | High | At risk | field-laptop-ring-03Field Operations | Workplace TechnologyMina K. | Aug 15, 2026Past target | 22% | |
| EXP-1038 · P1Privileged workforce session policy below baseline | High | Validation | workforce-admin-policyWorkforce Access | Identity EngineeringJamal R. | Aug 19, 2026 | 90% | |
| EXP-1024 · P1Dormant service account retained broad warehouse role | High | In remediation | svc-warehouse-importInventory Planning | Supply Chain SystemsElena V. | Aug 22, 2026 | 52% | |
| EXP-1008 · P2Build runner token exceeded required repository scope | Medium | Remediated | build-runner-simSoftware Delivery | Developer PlatformTheo B. | Jun 20, 2026 | 100% | |
| EXP-1020 · P2Missing device encryption attestation | Medium | At risk | design-studio-ring-02Creative Studio | Workplace TechnologyMina K. | Sep 2, 2026 | 15% | |
| EXP-1014 · P2Legacy support portal missing phishing-resistant MFA | Medium | Risk accepted | support-portal-legacyCustomer Support | Customer SystemsGrace P. | Sep 15, 2026 | 10% | |
| EXP-1004 · P3Debug endpoint included verbose application metadata | Low | Remediated | catalog-api-stageProduct Catalog | Commerce PlatformAri C. | Jun 14, 2026 | 100% |
SELECTED EXPOSURE / EXP-1042
In remediationInternet-facing checkout API package exposure
- Impacted system
- checkout-api-prod
- Business service
- Digital Checkout
- Accountable team
- Payments Platform
- Owner
- Sofia M.
- Target date
- Aug 20, 2026
- Estimated effort
- 64 person-hours
WHAT IS IMPACTED
External payment path and order submission
NEXT / COMPLETED ACTION
Upgrade the affected package, rotate the service image, and retest the public route.
VALIDATION EVIDENCE
Package inventory and synthetic external retest