Intelligence
Platform
Northgate Union BankFictional bank · synthetic data
Powered by Mesh API
Search
Jump to a page or a control
Jump to a page or a control
Common control set on NIST CSF 2.0
28 controls, each mapped once to every framework it serves. 13 evidenced, 8 partial, 7 gaps.
| ID | Control | Status |
|---|---|---|
| GV-02 | Every AI system is inventoried and observable Office of the CISO | GapCritical |
| ID-01 | Asset inventory matches the network IT Operations | PartialHigh |
| ID-02 | Vulnerabilities are fixed within the bank's standard Infrastructure Security | PartialHigh |
| ID-04 | Threat intelligence is received and shared Security Operations | PartialMedium |
| PR-01 | Privileged accounts are vaulted and attributable Identity and Access | GapCritical |
| PR-02 | Phishing-resistant MFA for privileged access Identity and Access | PartialCritical |
| PR-03 | AFASA customer authentication and fraud controls Digital Channels | PartialCritical |
| PR-04 | Access is recertified to least privilege Identity and Access | PartialHigh |
| PR-06 | Cardholder and SWIFT zones are segmented Network Security | GapCritical |
| PR-07 | Security changes follow approved change records Infrastructure Security | GapHigh |
| PR-08 | Endpoint protection runs on every host Endpoint Security | PartialCritical |
| PR-09 | Prompts leaving the bank are inspected Data Protection | GapHigh |
| DE-01 | Security logs are kept for the required period Security Operations | GapHigh |
| DE-04 | Daily log review is performed and recorded Security Operations | PartialMedium |
| RC-02 | Restores are tested every year Technology Resilience | GapHigh |
15 of 28 controls. Status is set by a rule over the evidence: any contradicting item makes a gap, any partial or stale item makes it partial.