Evidence AssistantBank compliance

Assurance

Overview
Controls
15
Evidence
Policy check
Change impact
4

Regulator

Exam readiness
BSP self-assessment
Evidence packs
Regulations

Intelligence

Ask
AI register

Platform

Connectors
Trust and audit

Northgate Union BankFictional bank · synthetic data

Powered by Mesh API

Overview
Controls
ID-05

Local only · nothing leaves the bank

Search

Jump to a page or a control

Identify · Foundational tier · IT Risk

ID-05Cyber risk assessment is current

An IT and cyber risk assessment is performed at least once a year and approved by the Risk Committee.

Ask about it Open in pack

Status

Evidence indicates

All 1 item support it and are fresh.

Exposure

Medium

1 evidence items from 1 sources

CCSA · Identify

Below Foundational

Not blocking this domain's next tier.

Evidence chain

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

ev-id05-1

Annual IT and cyber risk assessment approved by the Risk Committee

Uploaded Document · document · collected 2 months ago (Aug 16, 2026 · 05:02 UTC) · limit 365 days

Supports

Query: Uploaded PDF · RA-2026-approved.pdf
Identity: Uploaded by P. Mendoza
Collector: upload 1.3.0
Window: Point in time
Records: 1
SHA-256: 68f3c9d016fbc369601b5ac8d41aa4e2187a0418fbaa30f7821e9d86fdbbdafc

Maps to

One control, collected once, counted in 3 frameworks.

BSPCirc. 982
IT risk assessment
NIST CSFID.RA-05
Risks prioritised
PCI DSS12.3.1
Targeted risk analysis

Pack narratives

BSPNot drafted NIST CSFNot drafted PCI DSSNot drafted

Requirement text is our paraphrase. Each bank loads its own licensed PCI DSS and ISO text.