rv-2026-0389Submitted by Aisha Khan of IS Service Management25 Aug 2026Google Cloud, scored under CIS Controls v8.1 and Northwind’s own standardsmatched to Internal GenAI assistant with retrieval at 84%read from it-service-desk-assistant-lld-v2.0.pdf and it-service-desk-assistant-architecture.png
| Maps to | |||||||||
|---|---|---|---|---|---|---|---|---|---|
CAT-2 | Conditional services are used on their termsVertex AI is used outside its conditions of use | Estate fit | Estate fit | Service catalogue | High | Fail | Missing 1 cited, none proving it is built | Cyber Security | 24 Sept 2026 |
LLM01 | Prompt InjectionPrompts, retrieved chunks and tool results reach Gemini without screening | AI | Security | OWASP LLM Top 10 | High | Fail | Missing 3 cited, none proving it is built | IS Service Management | 24 Sept 2026 |
LLM02 | Sensitive Information DisclosureRestricted knowledge content can be surfaced to any employee, and replies are not screened | AI | Security | OWASP LLM Top 10 | High | Fail | Missing 4 cited, none proving it is built | IS Service Management | 24 Sept 2026 |
LLM08 | Vector and Embedding WeaknessesThe vector index carries no entitlements: every employee can retrieve every chunk | AI | Security | OWASP LLM Top 10 | High | Fail | Missing 4 cited, none proving it is built | IS Service Management | 24 Sept 2026 |
REL-1 | No single point of failure on the critical pathThe primary data store has no standby | Reliability | Reliability | GCP Architecture Framework | High | Fail | Missing | IS Service Management | 24 Sept 2026 |
AP-2 | Third party in the data pathThird party in the data path: ServiceNow (northwindprod) | Design pattern | Reliability | Design patterns | Medium | Fail | Missing | IS Service Management | 24 Oct 2026 |
COST-4 | Spend is visible and attributedNo budget, alert or cost attribution | Cost | Cost | GCP Architecture Framework | Medium | Fail | Missing | Cloud Platform Engineering | 24 Oct 2026 |
LLM06 | Excessive AgencyThe model decides when to raise an incident; no user confirmation is documented | AI | Security | OWASP LLM Top 10 | Medium | Fail | Missing 2 cited, none proving it is built | IS Service Management | 24 Oct 2026 |
MBSS-1 | The design names the baselines it is built to6 baselines apply and none is named in the design | Estate fit | Estate fit | MBSS baselines | Medium | Fail | Missing | Cyber Security | 24 Oct 2026 |
REL-3 | Recovery is tested, not assumedThe restore path has never been exercised | Reliability | Reliability | GCP Architecture Framework | Medium | Fail | Missing 1 cited, none proving it is built | IS Service Management | 24 Oct 2026 |
REL-5 | Dependencies fail without taking the application downA call to ServiceNow (northwindprod) has no stated failure behaviour | Reliability | Reliability | GCP Architecture Framework | Medium | Fail | Missing | IS Service Management | 24 Oct 2026 |
3.10 | Encrypt Sensitive Data in TransitTLS on every hop, including an enforced encrypted connection to Cloud SQL | Data | Security | PR.DS-02 | Low | Pass | Data Platform Engineering | — | |
3.11 | Encrypt Sensitive Data at RestData at rest uses Google default encryption, which the standard accepts for Confidential data | Data | Security | PR.DS-01 | Low | Pass | Data Platform Engineering | — | |
3.12 | Segment Data Processing and Storage Based on SensitivityThe index and the conversation database sit inside a VPC Service Controls perimeter | Data | Security | PR.IR-01 · PR.DS-01 | Low | Pass | Data Platform Engineering | — | |
6.3 | Require MFA for Externally-Exposed ApplicationsIdentity-Aware Proxy enforces corporate sign-in and MFA before requests reach the application | Identity | Security | PR.AA-03 | Low | Pass | Identity Engineering | — | |
6.5 | Require MFA for Administrative AccessProject administrators use 2-Step Verification with security keys | Identity | Security | PR.AA-03 · PR.AA-05 | Low | Pass | Identity Engineering | — | |
8.9 | Centralize Audit LogsAudit logs leave the project through the organisation-level sink, and every tool call is logged | Logging | Security | PR.PS-04 | Low | Pass | Cyber Security | — | |
11.4 | Establish and Maintain an Isolated Instance of Recovery DataDatabase backups go to a vault in a separate project with enforced retention | Resilience | Security | PR.DS-11 | Low | Pass | Cloud Platform Engineering | — | |
12.2 | Establish and Maintain a Secure Network ArchitecturePrivate IP database, Private Google Access and two allow-listed external destinations | Network | Security | PR.IR-01 | Low | Pass | Network Engineering | — | |
13.10 | Perform Application Layer FilteringCloud Armor with the OWASP rule set on the only public entry point | Network | Security | PR.IR-01 · DE.CM-01 | Low | Pass | Network Engineering | — | |
16.10 | Apply Secure Design Principles in Application ArchitecturesPer-workload service accounts and a ServiceNow integration user limited to what the tools need | Application | Security | PR.PS-06 | Low | Pass | IS Service Management | — | |
AP-1 | Shared databaseNo shared database | Design pattern | Reliability | Design patterns | Low | Pass | Not assessed | IS Service Management | — |
AP-4 | Snowflake environmentThe environment is reproducible | Design pattern | Operations | Design patterns | Low | Pass | Cloud Platform Engineering | — | |
CAT-1 | Every service is in the catalogue and permittedAll 11 services are in the catalogue and permitted | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
CAT-3 | Nothing depends on a service that is going awayNothing in the design is retiring or unassessed | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
CAT-4 | Data is held only where its class is permittedEvery store is assessed for the class it holds | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
COST-1 | Capacity follows demandNothing runs when nothing is happening | Cost | Cost | GCP Architecture Framework | Low | Pass | Not assessed | Cloud Platform Engineering | — |
COST-3 | Traffic that leaves is accounted forTraffic leaving the estate is accounted for | Cost | Cost | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
LLM05 | Improper Output HandlingTool arguments are schema-validated and incident text is inserted as plain text | AI | Security | OWASP LLM Top 10 | Low | Pass | IS Service Management | — | |
LLM07 | System Prompt LeakageThe system prompt holds instructions only; integration credentials are in Secret Manager | AI | Security | OWASP LLM Top 10 | Low | Pass | IS Service Management | — | |
LLM10 | Unbounded ConsumptionPer-user quotas keyed on the IAP identity and a project budget with alerts | AI | Security | OWASP LLM Top 10 | Low | Pass | IS Service Management | — | |
OPS-1 | Infrastructure is defined as codeThe environment is defined as code | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-2 | Releases are staged and reversibleReleases are staged and can be withdrawn | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-3 | Monitoring reaches a personAlerts reach a named rota | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-4 | Runbooks exist for the likely failuresRunbooks exist for the likely failures | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
PERF-1 | Latency and throughput targets are statedThe design states what it is built to serve | Performance | Performance | GCP Architecture Framework | Low | Pass | IS Service Management | — | |
PERF-4 | Scaling bounds are definedScaling bounds are set | Performance | Performance | GCP Architecture Framework | Low | Pass | IS Service Management | — | |
REL-2 | Recovery objectives are statedRecovery objectives are stated | Reliability | Reliability | GCP Architecture Framework | Low | Pass | IS Service Management | — |