Reports, indicators and exports #

Available

This page describes the restitutions actually available in RiskPilot, their source and their limits. A report never replaces the register that produces the data.

Dashboard #

The Dashboard menu displays six indicators limited to the connected organization:

Indicator	Source
Total risks	scenarios not hidden from the registry
Critical risks	level calculated with tenant thresholds
High risks	level calculated with tenant thresholds
Late actions	status or deadline passed
30 day deadlines	open shares maturing
Global Compliance	evaluable campaign results

The page completes these maps with risk distribution, the Top 10 risks, due actions and compliance by framework.

Executive report #

Dashboard → PDF report or Executive report opens a dated report in the name of the organization. The Print / Save as PDF button uses the browser's print function.

The report contains:

the six summary indicators;
the 360° Vision: deployed controls, critical third parties and financial scenarios;
distribution of risks by level;
the distribution of shares by status;
priority risks with current score;
expiry actions with priority and date;
compliance by benchmark.

Before distribution, check the displayed organization, date, thresholds, source registers and expected classification of the document.

360° vision #

The 360° Vision aggregates repositories of the same tenant. It does not merge data from multiple organizations or automatically correct inconsistencies.

Block	Reading
Controls	number deployed reported in total
Third party critics	critical number reported in the register
Financial scenarios	scenarios available for governance

An anomaly must be corrected in Security Measures, Third Party, Risks, Actions or Compliance, then the report must be regenerated.

CSV exports #

Export	Hotspot	Content
CSV Risks	Dashboard	tenant risk register
CSV Actions	Dashboard	tenant action plans
Conformity assessment	assessment concerned	results by requirement
SoA CSV	declaration concerned	applicability, rationale, controls, risks, actions, evidence and next review

CSVs use UTF-8 and the semicolon. Cells starting with =, +, - or @ are neutralized on the server side to limit the injection of formulas into a spreadsheet.

Audit log #

The technical log exposes date, user, action, resource and IP address. The API also provides a JSON export of events. If no export button appears in the current interface, do not present this function as a user export available without API integration.

The export contains sensitive metadata: limit its distribution, encrypt its storage and apply a retention period.

Documents and calendar- ISMS Documents downloads the authorized version file; This download is not a consolidated report. #

Action Plans → Sync My Calendar provides a personal iCalendar URL.
An iCalendar URL acts as a secret: do not publish it and revoke it after exposure.
A document sharing link remains limited to its version, its expiration, its password and its revocation status.

Prepare a management review #

Update the scenarios and review dates.
Address backlogged actions or document adjudication.
Check for unassessed compliance results.
Control critical third parties and undeployed measures.
Review priority risks and appetite gaps.
Generate the executive report.
Save the PDF with organization, date and classification.
Record decisions in the management review and create actions.

Diagnosis #

Symptom	Verification
totally unexpected	archived status, maintainer, filter and freshness of the register
surprising risk score	plausibility, impact and organizational thresholds
absent conformity	campaign, benchmark, results not evaluated or N/A
missing action	canceled/completed, due or responsible status
export refused	expired session, role, tenant or non-existent resource
Incomplete PDF	wait for graphics to load before printing

Security checks #

Exports are generated server-side and must remain tenant-scoped. Never circumvent a 403 refusal with a direct appeal. Dashboards are management aids, not independent proof: also keep sources, approvals and supporting documents.

Indicator series #

KPI or KRI history can be exported as chronological CSV from /api/v1/indicators/{id}/values/export. Batch import accepts up to 1,000 measurements and returns a result for each row.

Native PDF reports #

Annual and decision reports are exported directly as PDF or JSON. The intermediate HTML format is no longer available. Unknown formats return UNSUPPORTED_FORMAT with HTTP 400.