RiskPilot Website FR GitHub

Executive report and 360° Vision #

Objective #

The Executive report menu consolidates risks, actions, compliance and governance data without copying them. It is intended for management, CISOs and GRC managers.

Data driven #

Governance covers SMSI objectives, KPI/KRI with thresholds, management reviews, financial scenarios and investments with cost, charge, reduction and ROI. 360° Vision aggregates tenant-scoped repositories.

Usage #

Check the period and freshness of the records, examine risk/action allocations then print the executive report. An incorrect aggregate value corrects itself in its source register.

The report displays the six summary indicators, the 360° Vision, two distribution graphs, priority risks, actions due and compliance by reference. Print / Save as PDF uses the browser print function; wait for the loading to finish before produce the file.

Roadmap #

<span class="badge-status planned">Planned</span> Indicator value history, batch import and /api/v1/indicators API are not yet available.

Governance objects #

ObjectContent
ISMS Objectiveresult, responsible, deadline and status
KPI / KRIunit, target, thresholds and period
Management reviewtopics, decisions and follow-up
Financial scenarioloss frequency and range
Investmentcost, charge, reduction and ROI

Build the management #

Define unambiguous indicators, with unit, period, owner and thresholds. A KPI measures performance; a KRI signals the exposure. Financial scenarios use explicit ranges and assumptions. An investment compares cost and expected reduction without ignoring non-financial obligations.

Prepare a report #

  1. Update risks, actions and compliance.
  2. Control 360° Vision and its sources.
  3. Check objectives, indicators and thresholds.
  4. Document review decisions.
  5. Review scenarios and investments.
  6. Print while retaining date and perimeter.

Checks, errors and example #

An aggregated value is corrected in its source register. A target without a unit or period is unusable. Do not compare two different periods without stating so.

Example: management finances an MFA project for three out-of-tolerance risks. The file links cost, burden and expected reduction; the review sets a KRI for coverage of privileged accounts.

See Reports, indicators and exports for the procedure management review and diagnostic matrix.