Jump to a page or a control
Identify · Foundational tier · Office of the CISO
An independent party tests internet-facing and digital channels at least once a year, and findings are tracked to closure.
Status
Evidence indicatesAll 2 items support it and are fresh.
Exposure
High
2 evidence items from 2 sources
CCSA · Identify
Below FoundationalNot blocking this domain's next tier.
Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.
ev-id03-1
Independent penetration test of internet and mobile banking
Uploaded Document · document · collected 4 months ago (Jun 29, 2026 · 07:02 UTC) · limit 365 days
Powered by Mesh APIUploaded PDF · PT-2026-01-final.pdfb398f0f7c49a91f4e47639d4e0c28bf5f8b9eac41017ba9bf6c80a8a340dc014
ev-id03-2
Every penetration test high is closed or formally risk-accepted
ServiceNow ITSM · ticket · collected 30 h ago (Oct 14, 2026 · 09:02 UTC) · limit 365 days
GET /api/now/table/problem?sysparm_query=u_source=PT-2026-01587fdeebd5aa4b850c9d2fdf6f03806b7b6201a25e907cd347ce6fd243cc7a75