Monitoring finding · EXC-006
PayGate penetration test report expired; Northstar BPO reassessment overdue
Control VEN-01PayGate Payment GatewayDetected 9 Oct 2026Severity medium
VEN-01 · monitored control
Critical third parties are risk-assessed before onboarding and annually
PayGate penetration test report expired; Northstar BPO reassessment overdue
automated test
- Reasoning
- PayGate annual pen test summary expired 2026-08-12. Northstar BPO annual reassessment due 2026-08-20 not started.
- expected
- Not recorded
- observed
- Not recorded
- Action / owner
- ○ No data available
None
No review signal applies to this finding.