Findings
Open control failures
7 open · 3 high severity · costing 20 points of the score.
| Finding | Asset | Control | Age | Severity | Status |
|---|---|---|---|---|---|
| Model assumptions document missing for collections rebuild | Collections Propensity Model | HN-MR-04 | 151d | High | Open |
| Prompt injection filter bypassed in servicing assistant test | Branch Servicing Assistant (LLM) | HN-SC-02 | 93d | High | In review |
| Disparate impact gap exceeds threshold for one applicant segment | Consumer Credit Scoring v4 | HN-FA-01 | 73d | High | Open |
| Fraud model revalidation evidence incomplete | Card Fraud Detection Engine | HN-MR-02 | 130d | Medium | Mitigating |
| Proxy screening not rerun after feature refresh | Collections Propensity Model | HN-FA-02 | 110d | Medium | Open |
| Training data provenance gaps for two fraud features | Card Fraud Detection Engine | HN-DL-02 | 85d | Medium | Open |
| Rollback plan not attached to last scoring release | Consumer Credit Scoring v4 | HN-RS-03 | 164d | Low | Open |
| Missing fairness audit | Credit Risk Scoring v4 | FA-01 | 28d | High | Open |
| Unowned production agent | Collections Outreach Agent | EX-03 | 12d | High | Open |
| Model card not published | Customer Sentiment LLM | EX-02 | 22d | Medium | Mitigating |
| Stale lineage metadata | Fraud Detection Net | DL-02 | 8d | Medium | In review |
| Revalidation sign-off missing | Collections Outreach Agent | MR-04 | 5d | Medium | Open |
| Vendor diligence expired | Wealth Robo-Advisory Pilot | TP-01 | 2d | Medium | Open |
| Post-mortem overdue | Wealth Robo-Advisory Pilot | RS-03 | -6d | Low | Open |
| Reason codes incomplete | Credit Risk Scoring v4 | EX-01 | 103d | Medium | Closed |