Open Issues & Remediation Backlog

Active deficiencies & quarterly intake trajectory

98
11 Critical
34 High • 53 Medium
Q1 '25
Q2 '25
Q3 '25
Q4 '25
Executive Backlog Insights
18.4 Days TAT:Resolution velocity exceeds the 21-day board SLA.
58% Plant 1:Gurugram environmental & SCADA hold primary share.
Remediation Target: < 21 Days18.4 Days Average

Top Issue Types & Root Causes

Taxonomy breakdown across 3.5K logged items

Deviation from Policy
1.6K (46%)
Threat & Vulnerability
446 (26%)
IT-Control Failure
377 (18%)
HSE & Statutory
240 (10%)
3.5KTotal
Taxonomy & Governance Insights
-14% Deviations:Automated ERP approval rules reduced policy lapses.
78% SCADA IT:Legacy PLC operating systems drive IT failures.
Taxonomy StandardISO 37001 / COSO Framework

Overall Metric & Appetite Breaches

KRI threshold excursions vs board zero-tolerance ceiling

9
3 Critical
Appetite Breached
Q1 '25
Q2 '25
Q3 '25
Q4 '25
KRI & Board Appetite Insights
3 Board Breaches:Liaison Retainers (+42%), SCADA Patching & Tooling distress.
-56% Compression:Breaches reduced from 9 in Q3 down to 4 in Q4.
Appetite Ceiling StatusZero-Tolerance Zone

Key Risks Portfolio Profile

Severity band distribution across 263 monitored risks

263
Key Risks Ingested
64 Active ERM
14 Very High
5%
48 High
18%
126 Medium
48%
75 Low
29%
ISO 31000 Risk Profile Insights
14 Critical Risks:Under mandatory bi-weekly CRO surveillance.
72% Migration:Inherent critical risks compressed to Medium safe bands.
Scoring FrameworkISO 31000 5×5 Matrix

Control Test Results & Assurance

ISO 31000 effectiveness verification across 322 controls

322
96 Completed
94.2% Control Pass
Q1 '25
Q2 '25
Q3 '25
Q4 '25
Assurance & Testing Insights
94.2% Pass Rate:Controls confirmed operating effectively.
4 Ineffective:Automated CAPA re-test scheduled within 14 days.
Testing CadenceContinuous 30-Day Cycle

Ongoing Risk Treatment Activities

Forensic clearance velocity & statutory adherence

64
Treated Risks
CAPA Active: 28
Accept
12
Avoid
18
Mitigate
28
Transfer
6
Treatment & Mitigation Velocity
85.9% Controlled:Portfolio operating under managed mitigation plans.
₹45 Cr Reinsurance:Catastrophic plant risk transferred commercially.
Remediation SLA Status0 Overdue Actions

Residual Risk Exposure by Entity & Process

Inherent gross exposure vs residual controlled trajectory

Plant 1 - Gurugram (24 Risks)₹14.2 Cr → ₹4.5 Cr (-68.3%)
Plant 2 - Manesar Stamping (19 Risks)₹11.8 Cr → ₹3.2 Cr (-72.8%)
Tier-1 Supply Chain Hub (13 Risks)₹8.5 Cr → ₹3.1 Cr (-63.5%)
Corporate Finance & Treasury (8 Risks)₹3.9 Cr → ₹1.6 Cr (-58.9%)
Entity Exposure & Reduction Insights
-72.8% Manesar:Highest compression via dual-load weighbridges.
₹3.1 Cr Vendor:Tooling supplier insolvency requires dual-sourcing.
Gross Portfolio Compression-67.7% Net Mitigation Efficiency

MoM Velocity & Action Governance

Month-on-month movement & committee audit cadence

Q2-2026 Audit
New Identified
+6
Past 30 Days
Controls Hardened
+18
Passed Testing
Score Compressed
-14
Downgraded to Safe
Appetite Breaches
3
Escalated to Board
Audit & Committee Governance Insights
+3.0x Velocity:Controls hardened (+18) vs new risks (+6).
18 Days:Upcoming Q2 Board Risk Committee session.