Board View
Condensed posture for Head of Entity / Board — major findings, approvals awaiting sign-off and the items Regulation 14 requires to reach the Board.
74%Portfolio compliance
3 controls overdue portfolio-wide. Trend improving over the last two quarters.
5
Critical/high audit findings requiring Board awareness (Reg. 14)
3
Items awaiting Head/Board approval
Major audit findings
Legacy firmware on OT gateway lacks vendor security patch
Annual self-audit — prior cycle · Owner: Site OT Team
Two-person approval not evidenced for a critical change
Annual self-audit — prior cycle · Owner: Information Security Division
Evidence file for a control test lacks approver identity
Vindhyachal Thermal Station — pre-commissioning follow-up · Owner: CISO Office
Remote access session logs incomplete for one plant segment
Vindhyachal Thermal Station — pre-commissioning follow-up · Owner: IT Team
Vendor NDA missing renewed confidentiality survival clause
Annual self-audit — all applicable regulations · Owner: CISO Office
Approvals queue
Critical remote access — Hydro Governor Control System
Requested by R. Nair · 22 Aug 2026
Bill of Materials — Portfolio Critical Systems — v5.0
Owner: Vendor Management · Approvers: Vendor Management Lead
Electronic Security Perimeter Rule Review Procedure — v1.0
Owner: Site OT Team · Approvers: CISO