Reports

NorthBank UK is 68% ready for the OBL Directory migration. 47 of 52 systems have been assessed against 149 controls; 126 pass. 18 findings remain open, of which 5 are critical and 3 block cutover.

Evidence coverage stands at 81% against a 95% cutover target. The current recommendation is NOT READY FOR CUTOVER.

Key risks

• Legacy Directory endpoint detected (TPP Registration Service)
• OAuth audience references legacy token endpoint (Jans IAM)
• Signing key selected by position, not kid (Jans IAM)
• Keyfactor issuing CA absent from trust store (TPP Registration Service)
• TPP role validated from certificate only (TPP Registration Service)