Govern & Comply

Action Plan Portfolio

Visibility across all corrective actions — effectiveness, bottlenecks, and decisions awaiting escalation.

New Action Plan
Loading dashboard…
Total Active
42
Overdue
8
Critical w/o Solution
5
Completed on Time
71%
Actually Reduced Risk
58%
Reopened
3

Portfolio Health — Open vs Closed Over Time

OpenClosed
2026-012026-022026-032026-042026-05

Action Resolution Funnel

Created80 · 100%
In execution52 · 65%
Awaiting evidence34 · 43%
Validated by 2nd line22 · 28%
Reopened3 · 4%
Conversion: created → validated4%

Effectiveness by Area

AreaActiveOverduePostponedEffectiveness
Data Protection1231
72%
Access Control820
85%
Incident Response712
55%
Vendor Management921
40%
Cloud Security600
91%

Highest Risks — Risk vs Urgency

Risk (Y)
Urgency (X) →
LGPD gap
MFA rollout
RDP exposure
Patch SLAs
DPA missing
Log retention
EDR coverage
SIEM rules
openin progresscompleted
Top-right quadrant = high urgency + high risk. Hover for labels.

Decision Queue

3 pending
Plans awaiting committee or budget decision
DLP tool procurement
Data Protection
BudgetBoardDue 5/30/2026
Pentest scope expansion
Vulnerability Mgmt
CommitteeDue 6/5/2026
Accept residual RDP risk
Network
Risk Accept.CISODue 5/25/2026