Executive report and 360° Vision #
Objective #
The Executive report menu consolidates risks, actions, compliance and governance data without copying them. It is intended for management, CISOs and GRC managers.
Data driven #
Governance covers SMSI objectives, KPI/KRI with thresholds, management reviews, financial scenarios and investments with cost, charge, reduction and ROI. 360° Vision aggregates tenant-scoped repositories.
Usage #
Check the period and freshness of the records, examine risk/action allocations then print the executive report. An incorrect aggregate value corrects itself in its source register.
The report displays the six summary indicators, the 360° Vision, two distribution graphs, priority risks, actions due and compliance by reference. Print / Save as PDF uses the browser print function; wait for the loading to finish before produce the file.
Roadmap #
<span class="badge-status planned">Planned</span> Indicator value history, batch import and /api/v1/indicators API are not yet available.
Governance objects #
| Object | Content |
|---|---|
| ISMS Objective | result, responsible, deadline and status |
| KPI / KRI | unit, target, thresholds and period |
| Management review | topics, decisions and follow-up |
| Financial scenario | loss frequency and range |
| Investment | cost, charge, reduction and ROI |
Build the management #
Define unambiguous indicators, with unit, period, owner and thresholds. A KPI measures performance; a KRI signals the exposure. Financial scenarios use explicit ranges and assumptions. An investment compares cost and expected reduction without ignoring non-financial obligations.
Prepare a report #
- Update risks, actions and compliance.
- Control 360° Vision and its sources.
- Check objectives, indicators and thresholds.
- Document review decisions.
- Review scenarios and investments.
- Print while retaining date and perimeter.
Checks, errors and example #
An aggregated value is corrected in its source register. A target without a unit or period is unusable. Do not compare two different periods without stating so.
Example: management finances an MFA project for three out-of-tolerance risks. The file links cost, burden and expected reduction; the review sets a KRI for coverage of privileged accounts.
See Reports, indicators and exports for the procedure management review and diagnostic matrix.