Advanced AI Workflow · Al-Ikhsan Sports Sdn Bhd
Security & Compliance Automation
Hourly + on-anomaly
CISO / Security Ops
6 high-priority
10 items in queue
4 policy breaches
1 AI suggestions
Critical exposures
| Item | Signal | Actions |
|---|---|---|
HIGH CVE-2025-31119 · Fortinet SSL-VPN RCE (CVSS 9.8) | 12 endpoints unpatched · exploit PoC public | |
HIGH CVE-2025-28450 · MS Exchange EoP (CVSS 8.8) | Mailbox server exch-hq-02 · patch scheduled | |
HIGH 106 accounts without MFA · 4 privileged | Privileged: sap-admin-02, ad-svc-backup, fin-approver-01 | |
MEDIUM 11 suspicious logins in 24h | Top: 6× impossible-travel (VN, RU), 3× tor exit · 217 failed attempts total | |
MEDIUM 28 USB mass-storage events flagged | Top offender: laptop DL5420-3390 (7 events) |
Policy breaches (live)
| Item | Signal | Actions |
|---|---|---|
HIGH Privileged MFA coverage (Security) Action on breach: Conditional Access block on next sign-in | ≥ 100% · current: 96% — 4 accounts gap · owner IAM Lead | |
HIGH Idle VM tolerance (Cloud) Action on breach: Auto-stop after 7d idle, terminate after 30d | ≤ 5% of fleet · current: 6.1% · owner FinOps | |
HIGH Laptop lifecycle ceiling (Hardware) Action on breach: Add to next quarterly refresh batch | ≤ 5 years · current: 218 devices over · owner IT Ops |
Compliance evidence pack
| Item | Signal | Actions |
|---|---|---|
MEDIUM SOC 2 · Q3 control evidence | 42/48 controls green · 6 pending screenshots | |
LOW PDPA · data subject requests | 3 open DSAR · SLA 21 days · oldest 9 days |