Findings Priority Fixes Search Severity All High Medium Low Area All Access Staff Vendors Policy Phishing HIGH ACCESS Shared front desk login used by 6 staff Fix: individual accounts + MFA + remove shared login. Owner: GM + IT Due: 7 days HIGH VENDORS Vendor has permanent access with no end date Fix: access windows + approvals + monthly review. Owner: Ops + IT Due: 14 days MED PHISHING Phishing drill: 18% click rate (Front Desk) Fix: training + repeat drill. Owner: HR + FD Mgr Due: 14 days MED POLICY Key policies not signed by 12 staff Fix: reminders + block until signed. Owner: HR Due: 7 days LOW STAFF New hire onboarding missing security step Fix: add security onboarding checklist. Owner: HR Due: 30 days 5 items Create Task Add Findings to Evidence Pack
Details Select a finding — Finding — Click a finding on the left to see the full breakdown. Why it matters — Fix (simple) — Owner — Due — Assign Task Mark In Progress Mark Resolved Proof to collect — Attach Proof (Prototype) Executive summary (sample) Biggest risk is shared accounts and vendor access. Fixing these improves accountability and insurance readiness. Copy Summary