Risk Heatmap — Insights
A separate experiment: de-emphasize the heatmap interaction and focus the story on platform-detected signals + suggested actions.
Prototype surface
Light-mode canvas inside avo.re
Platform signals
This is a platform layer (not the heatmap). It tells you what to investigate and why.
Reporting StudioLast run: 2 hours agoScope: Current period
1 of 4
Cross-Organizational patterns (2)
Signals that span BUs, org paths, or shared dependencies.
2 signals
Tip: click a signal to open the tray (and optionally jump the table).
Risk distribution
By severity
High3
Medium46
Low23
Heatmap
Secondary evidence · click opens tray · filters table
Color: GrayRange: Current
Risks
Showing 72 of 72
No filters applied
| Risk Name | Risk ID | Inherent Risk | Residual Risk | Workflow Status | Likelihood | Impact | Risk Type | Risk Category | Org / BU / Subsidiary |
|---|---|---|---|---|---|---|---|---|---|
Third-party access controls Owner: Unassigned | R-10421 | High | Medium | In review | High | High | Cyber | Access | Northbridge Financial / Technology & Operations / Vendor Management |
Data retention policy gaps Owner: Unassigned | R-10218 | Medium | Medium | Approved | Medium | Medium | Compliance | Policy | Northbridge Financial / Risk & Compliance / Policy Operations |
EU vendor subprocessors not reviewed Owner: Unassigned | R-10990 | High | High | Draft | Medium | High | Privacy | Third-party | Northbridge Financial / Commercial Banking / EMEA Vendor Oversight |
Inconsistent incident severity rubric Owner: Unassigned | R-10077 | Medium | Low | Monitoring | Low | Medium | Operational | Process | Northbridge Financial / Technology & Operations / SRE |
Subsidiary audit evidence delays Owner: Unassigned | R-11102 | Medium | Medium | In review | High | Medium | Audit | Evidence | Northbridge Financial / Risk & Compliance / Audit Evidence |
Unpatched dependency exposure Owner: Unassigned | R-11235 | High | High | In review | High | High | Cyber | Vulnerability | Northbridge Financial / Technology & Operations / Engineering Platform |
Regional BCP coverage gaps Owner: Unassigned | R-10701 | Medium | Medium | Approved | Medium | High | Resilience | BCP | Northbridge Financial / Consumer Banking / APAC Operations |
SOX control mapping drift Owner: Unassigned | R-10544 | High | Medium | Monitoring | Low | High | Compliance | Controls | Northbridge Financial / Risk & Compliance / Corporate Controls |
Entity ownership records outdated Owner: Unassigned | R-11310 | Medium | Low | Draft | Low | Medium | Governance | Records | Northbridge Financial / Wealth Management / Legal Entity Records |
Vendor risk reassessment overdue Owner: Unassigned | R-11008 | High | High | In review | High | Medium | Third-party | Review cadence | Northbridge Financial / Commercial Banking / Vendor Management |
Cyber Access — signal cluster 1 Owner: Unassigned | R-20011 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Consumer Banking / North America Retail Ops |
Cyber Vulnerability — signal cluster 2 Owner: Unassigned | R-20012 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Consumer Banking / APAC Operations |
Cyber Detection — signal cluster 3 Owner: Unassigned | R-20013 | High | Medium | Approved | High | Low | Cyber | Detection | Northbridge Financial / Consumer Banking / EMEA Retail Controls |
Privacy Third-party — signal cluster 4 Owner: Unassigned | R-20014 | Low | Low | Monitoring | Low | Medium | Privacy | Third-party | Northbridge Financial / Commercial Banking / North America Corporate Lending |
Privacy Retention — signal cluster 5 Owner: Unassigned | R-20015 | Medium | Medium | Draft | Medium | High | Privacy | Retention | Northbridge Financial / Commercial Banking / EMEA Vendor Oversight |
Compliance Controls — signal cluster 6 Owner: Unassigned | R-20016 | High | Medium | In review | High | Low | Compliance | Controls | Northbridge Financial / Commercial Banking / APAC Trade Finance |
Compliance Policy — signal cluster 7 Owner: Unassigned | R-20017 | Low | Low | Approved | Low | Medium | Compliance | Policy | Northbridge Financial / Wealth Management / Advisory Operations |
Audit Evidence — signal cluster 8 Owner: Unassigned | R-20018 | Medium | Medium | Monitoring | Medium | High | Audit | Evidence | Northbridge Financial / Wealth Management / Legal Entity Records |
Operational Process — signal cluster 1 Owner: Unassigned | R-20019 | High | Medium | Draft | High | Low | Operational | Process | Northbridge Financial / Risk & Compliance / Corporate Controls |
Resilience BCP — signal cluster 2 Owner: Unassigned | R-20020 | Low | Low | In review | Low | Medium | Resilience | BCP | Northbridge Financial / Risk & Compliance / Policy Operations |
Third-party Review cadence — signal cluster 3 Owner: Unassigned | R-20021 | Medium | Medium | Approved | Medium | High | Third-party | Review cadence | Northbridge Financial / Risk & Compliance / Audit Evidence |
Governance Records — signal cluster 4 Owner: Unassigned | R-20022 | High | Medium | Monitoring | High | Low | Governance | Records | Northbridge Financial / Technology & Operations / Engineering Platform |
Cyber Access — signal cluster 5 Owner: Unassigned | R-20023 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Technology & Operations / SRE |
Cyber Vulnerability — signal cluster 6 Owner: Unassigned | R-20024 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Technology & Operations / Identity & Access |
Cyber Detection — signal cluster 7 Owner: Unassigned | R-20025 | High | Medium | Approved | High | Low | Cyber | Detection | Northbridge Financial / Technology & Operations / Vendor Management |
Privacy Third-party — signal cluster 8 Owner: Unassigned | R-20026 | Low | Low | Monitoring | Low | Medium | Privacy | Third-party | Northbridge Financial / Consumer Banking / North America Retail Ops |
Privacy Retention — signal cluster 1 Owner: Unassigned | R-20027 | Medium | Medium | Draft | Medium | High | Privacy | Retention | Northbridge Financial / Consumer Banking / APAC Operations |
Compliance Controls — signal cluster 2 Owner: Unassigned | R-20028 | High | Medium | In review | High | Low | Compliance | Controls | Northbridge Financial / Consumer Banking / EMEA Retail Controls |
Compliance Policy — signal cluster 3 Owner: Unassigned | R-20029 | Low | Low | Approved | Low | Medium | Compliance | Policy | Northbridge Financial / Commercial Banking / North America Corporate Lending |
Audit Evidence — signal cluster 4 Owner: Unassigned | R-20030 | Medium | Medium | Monitoring | Medium | High | Audit | Evidence | Northbridge Financial / Commercial Banking / EMEA Vendor Oversight |
Operational Process — signal cluster 5 Owner: Unassigned | R-20031 | High | Medium | Draft | High | Low | Operational | Process | Northbridge Financial / Commercial Banking / APAC Trade Finance |
Resilience BCP — signal cluster 6 Owner: Unassigned | R-20032 | Low | Low | In review | Low | Medium | Resilience | BCP | Northbridge Financial / Wealth Management / Advisory Operations |
Third-party Review cadence — signal cluster 7 Owner: Unassigned | R-20033 | Medium | Medium | Approved | Medium | High | Third-party | Review cadence | Northbridge Financial / Wealth Management / Legal Entity Records |
Governance Records — signal cluster 8 Owner: Unassigned | R-20034 | High | Medium | Monitoring | High | Low | Governance | Records | Northbridge Financial / Risk & Compliance / Corporate Controls |
Cyber Access — signal cluster 1 Owner: Unassigned | R-20035 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Risk & Compliance / Policy Operations |
Cyber Vulnerability — signal cluster 2 Owner: Unassigned | R-20036 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Risk & Compliance / Audit Evidence |
Cyber Detection — signal cluster 3 Owner: Unassigned | R-20037 | High | Medium | Approved | High | Low | Cyber | Detection | Northbridge Financial / Technology & Operations / Engineering Platform |
Privacy Third-party — signal cluster 4 Owner: Unassigned | R-20038 | Low | Low | Monitoring | Low | Medium | Privacy | Third-party | Northbridge Financial / Technology & Operations / SRE |
Privacy Retention — signal cluster 5 Owner: Unassigned | R-20039 | Medium | Medium | Draft | Medium | High | Privacy | Retention | Northbridge Financial / Technology & Operations / Identity & Access |
Compliance Controls — signal cluster 6 Owner: Unassigned | R-20040 | High | Medium | In review | High | Low | Compliance | Controls | Northbridge Financial / Technology & Operations / Vendor Management |
Compliance Policy — signal cluster 7 Owner: Unassigned | R-20041 | Low | Low | Approved | Low | Medium | Compliance | Policy | Northbridge Financial / Consumer Banking / North America Retail Ops |
Audit Evidence — signal cluster 8 Owner: Unassigned | R-20042 | Medium | Medium | Monitoring | Medium | High | Audit | Evidence | Northbridge Financial / Consumer Banking / APAC Operations |
Operational Process — signal cluster 1 Owner: Unassigned | R-20043 | High | Medium | Draft | High | Low | Operational | Process | Northbridge Financial / Consumer Banking / EMEA Retail Controls |
Resilience BCP — signal cluster 2 Owner: Unassigned | R-20044 | Low | Low | In review | Low | Medium | Resilience | BCP | Northbridge Financial / Commercial Banking / North America Corporate Lending |
Third-party Review cadence — signal cluster 3 Owner: Unassigned | R-20045 | Medium | Medium | Approved | Medium | High | Third-party | Review cadence | Northbridge Financial / Commercial Banking / EMEA Vendor Oversight |
Governance Records — signal cluster 4 Owner: Unassigned | R-20046 | High | Medium | Monitoring | High | Low | Governance | Records | Northbridge Financial / Commercial Banking / APAC Trade Finance |
Cyber Access — signal cluster 5 Owner: Unassigned | R-20047 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Wealth Management / Advisory Operations |
Cyber Vulnerability — signal cluster 6 Owner: Unassigned | R-20048 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Wealth Management / Legal Entity Records |
Cyber Detection — signal cluster 7 Owner: Unassigned | R-20049 | High | Medium | Approved | High | Low | Cyber | Detection | Northbridge Financial / Risk & Compliance / Corporate Controls |
Privacy Third-party — signal cluster 8 Owner: Unassigned | R-20050 | Low | Low | Monitoring | Low | Medium | Privacy | Third-party | Northbridge Financial / Risk & Compliance / Policy Operations |
Privacy Retention — signal cluster 1 Owner: Unassigned | R-20051 | Medium | Medium | Draft | Medium | High | Privacy | Retention | Northbridge Financial / Risk & Compliance / Audit Evidence |
Compliance Controls — signal cluster 2 Owner: Unassigned | R-20052 | High | Medium | In review | High | Low | Compliance | Controls | Northbridge Financial / Technology & Operations / Engineering Platform |
Compliance Policy — signal cluster 3 Owner: Unassigned | R-20053 | Low | Low | Approved | Low | Medium | Compliance | Policy | Northbridge Financial / Technology & Operations / SRE |
Audit Evidence — signal cluster 4 Owner: Unassigned | R-20054 | Medium | Medium | Monitoring | Medium | High | Audit | Evidence | Northbridge Financial / Technology & Operations / Identity & Access |
Operational Process — signal cluster 5 Owner: Unassigned | R-20055 | High | Medium | Draft | High | Low | Operational | Process | Northbridge Financial / Technology & Operations / Vendor Management |
Resilience BCP — signal cluster 6 Owner: Unassigned | R-20056 | Low | Low | In review | Low | Medium | Resilience | BCP | Northbridge Financial / Consumer Banking / North America Retail Ops |
Third-party Review cadence — signal cluster 7 Owner: Unassigned | R-20057 | Medium | Medium | Approved | Medium | High | Third-party | Review cadence | Northbridge Financial / Consumer Banking / APAC Operations |
Governance Records — signal cluster 8 Owner: Unassigned | R-20058 | High | Medium | Monitoring | High | Low | Governance | Records | Northbridge Financial / Consumer Banking / EMEA Retail Controls |
Cyber Access — signal cluster 1 Owner: Unassigned | R-20059 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Commercial Banking / North America Corporate Lending |
Cyber Vulnerability — signal cluster 2 Owner: Unassigned | R-20060 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Commercial Banking / EMEA Vendor Oversight |
Cyber Detection — signal cluster 3 Owner: Unassigned | R-20061 | High | Medium | Approved | High | Low | Cyber | Detection | Northbridge Financial / Commercial Banking / APAC Trade Finance |
Privacy Third-party — signal cluster 4 Owner: Unassigned | R-20062 | Low | Low | Monitoring | Low | Medium | Privacy | Third-party | Northbridge Financial / Wealth Management / Advisory Operations |
Privacy Retention — signal cluster 5 Owner: Unassigned | R-20063 | Medium | Medium | Draft | Medium | High | Privacy | Retention | Northbridge Financial / Wealth Management / Legal Entity Records |
Compliance Controls — signal cluster 6 Owner: Unassigned | R-20064 | High | Medium | In review | High | Low | Compliance | Controls | Northbridge Financial / Risk & Compliance / Corporate Controls |
Compliance Policy — signal cluster 7 Owner: Unassigned | R-20065 | Low | Low | Approved | Low | Medium | Compliance | Policy | Northbridge Financial / Risk & Compliance / Policy Operations |
Audit Evidence — signal cluster 8 Owner: Unassigned | R-20066 | Medium | Medium | Monitoring | Medium | High | Audit | Evidence | Northbridge Financial / Risk & Compliance / Audit Evidence |
Operational Process — signal cluster 1 Owner: Unassigned | R-20067 | High | Medium | Draft | High | Low | Operational | Process | Northbridge Financial / Technology & Operations / Engineering Platform |
Resilience BCP — signal cluster 2 Owner: Unassigned | R-20068 | Low | Low | In review | Low | Medium | Resilience | BCP | Northbridge Financial / Technology & Operations / SRE |
Third-party Review cadence — signal cluster 3 Owner: Unassigned | R-20069 | Medium | Medium | Approved | Medium | High | Third-party | Review cadence | Northbridge Financial / Technology & Operations / Identity & Access |
Governance Records — signal cluster 4 Owner: Unassigned | R-20070 | High | Medium | Monitoring | High | Low | Governance | Records | Northbridge Financial / Technology & Operations / Vendor Management |
Cyber Access — signal cluster 5 Owner: Unassigned | R-20071 | Low | Low | Draft | Low | Medium | Cyber | Access | Northbridge Financial / Consumer Banking / North America Retail Ops |
Cyber Vulnerability — signal cluster 6 Owner: Unassigned | R-20072 | Medium | Medium | In review | Medium | High | Cyber | Vulnerability | Northbridge Financial / Consumer Banking / APAC Operations |