Northgate Union Bank · Bangko Sentral ng Pilipinas · Thematic examination, first quarter
Posture
Every control, coloured by what was observed
What needs you first
Open findings, worst exposure first
One fix, several controls
Gaps grouped by shared root cause
Branch refresh left 740 hosts unmanaged
Reconcile Falcon against the CMDB and deploy the agent to the unmatched population.
Production AI traffic bypasses the gateway
Route model calls through the on-premise gateway so prompts are inspected, logged and attributable.
Core banking log retention cut below the supervisory period
Restore 365-day retention on the core banking index and backfill from cold storage.
Critical remediation queues behind the monthly change window
Open an emergency change path for internet-facing criticals.
Control board
32 controls across 4 frameworks
BSP
BSP Information Security Management
NIST CSF
NIST Cybersecurity Framework 2.0
PCI DSS
PCI DSS v4.0
ISO 27001
ISO/IEC 27001:2022 Annex A
Northgate Union Bank is a fictional institution created for this demonstration. Every figure, finding and system on this screen is synthetic. Control text is our own paraphrase, not licensed framework wording.