12

Critical Threats

▲ 4 this week

247

Total Incidents

▼ 30% YoY

3.8h

Avg MTTR

▼ improved

96%

Detection Rate

▲ 2% vs target

38

Active Alerts

▲ 7 since 00:00

Live Threat Alert Feed SOC real-time · CDG timezone

All

Critical

High

Medium

Low

INC-4421Ransomware attempt · Finance SQL ServerCritical02:14

INC-4402Data exfiltration · CRM API endpointCritical01:47

INC-4398Privilege escalation · Active DirectoryHigh01:22

INC-4375Phishing campaign · Email gatewayHigh00:58

INC-4340SQL injection · Oracle production DBCritical00:31

INC-4387Suspicious VPN login · Paris HQMedium00:19

INC-4355DLP policy violation · EndpointMedium00:08

INC-4368Port scan detected · DMZ perimeterLow23:54

Incident Heatmap By hour · last 7 days

000408121620

Low

High

Incident Categories

Malware 28% Phishing 24% Insider 18% Network 16%

Monthly Threat Volume by Severity Jan–Dec 2024 stacked

94%

Compliance Score

▲ 3% vs Q3

91.4%

SLA Compliance

▲ 1.2% on target

68%

3rd Party Risk

▼ weakest domain

4.2x

Security ROI

▲ 0.3x YoY

Risk Exposure by Region

Control Effectiveness

Endpoint

95%

Network

91%

Identity

88%

Data Loss

83%

Email Sec

79%

Vuln Mgmt

74%

3rd Party

68%

MTTR Trend Hours · monthly

Risk Heat Matrix Likelihood × Impact — click cells to explore

Impact →

Likelihood ↑

Very LowLowMedHighCritical

Select a risk cell to view details

Click any cell in the matrix to see risk scenario details, current controls, and remediation status.

€24.6M

Total Cyber Spend

▲ 8.2% YoY

82%

Budget Utilized

— on track

€99.6K

Cost per Incident

▼ €12K reduced

4.2x

Security ROI

▲ 0.3x vs last yr

€5.4M

Budget Remaining

Q4 rollover

Spend vs Budget — Monthly Waterfall 2024 · €M

Budget Within budget Over budget

Allocation by Domain

Endpoint Security

28%

Network Defense

22%

Identity & Access

18%

SOC Operations

14%

Compliance

9%

Training

5%

Vendor Risk

4%

Quarterly Summary

Q1 2024€5.8M

Q2 2024€6.1M

Q3 2024€7.2M ▲

Q4 2024€5.5M

Ancillary€2.1M

Cost per Incident vs Risk Reduction Score Dual axis · 2024

Cost per incident (€K) Risk reduction %

94%

Overall Score

▲ 3% this qtr

88%

Audit Completion

▲ 5% progress

23

Open Findings

7 critical overdue

91.7%

Policy Adherence

▲ 2.1% on target

Framework Compliance Radar 7 regulatory frameworks · 2024

Audit Findings Pipeline

7 Critical — OverdueDORA resilience gaps, 3rd-party vendor controls pending escalation

9 High — In ProgressPCI DSS cardholder data controls, NIS2 reporting procedures

7 Medium — ScheduledSolvency II actuarial data governance review, Q1 2025

112 Closed — ResolvedFull remediation with evidence packs submitted

Department Compliance

Finance & Risk

97%

Legal

96%

IT Infra

94%

Operations

90%

HR & People

85%

Sales

79%

3rd Parties

68%

Compliance Score Trend — All Frameworks Monthly vs 90% regulatory floor

Azure-Powered BI Pipeline — End-to-End Architecture

Sources

Oracle SQL
Incident DB

Cyber Ticketing
ServiceNow

Excel / CSV
Finance reports

Compliance Sys
GRC platform

ERP Financial
SAP

↓ Azure Data Factory — Extract · Transform · Validate · Load ↓

Storage

Azure Data Lake
Raw + Cleansed zones

Star Schema DWH
Fact + Dim tables

Power Query
M transforms

Incremental
Refresh policies

↓ DirectQuery (live threats) + Import Mode (historical analytics) ↓

Dashboards

CISO Dashboard
Full RLS access

Regional Mgr
Geo filter RLS

Dept Heads
BU filter RLS

Audit Team
Compliance only

Microsoft AzureAzure Data FactoryAzure Data LakePower BIOracle SQLPower QueryDAXDirectQueryImport ModeStar SchemaRow-Level SecurityIncremental Refresh

Refresh Schedule

Live threat feedReal-time

Incident ticketsEvery 15 min

Financial dataDaily 07:00

Compliance scoresWeekly Mon

Audit findingsDaily 09:00

Incremental modeEnabled

Core DAX Measures

CALCULATE()KPI scoping

AVERAGEX()MTTR calc

TOTALYTD()YTD spend

DATEADD()Period delta

DIVIDE()ROI ratio

RANKX()Region ranking

Performance Gains