📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Reports & Analytics

See where your compliance programme stands, download board-ready reports, and send them on a schedule.

Where to find it
Compliance (GRC) › Compliance Reports
Who can use it
Anyone whose compliance (GRC) role includes reports; downloads need export permission, Take snapshot needs edit permission, creating or changing schedules needs edit and export permission, and removing a schedule needs delete permission
Plan
GRC Compliance Platform
For
Everyone

What the page is for

This page brings together the figures from across the compliance platform: readiness by framework, the biggest gaps, risks, tasks, evidence, automatic checks, assessments, vulnerability scans and trends over time. The numbers are the same ones used on the compliance dashboard and in nightly snapshots, so a figure here, in a board pack and in last night's snapshot all agree.

Each tab focuses on one area and has its own filters and downloads. The Downloads tab gathers the ready-made reports, such as a board pack, readiness report, statement of applicability, risk register, evidence index and task list, as PDF, Excel (XLSX) or CSV.

On the Schedules tab you can have a report sent automatically. Recipients get a secure link that works for 14 days and asks for a code sent to their address; the report itself is never attached to the email.

What you see

The Reports & Analytics page, with the page buttons, tabs, headline figures, summary cards, trends and schedules numbered 1 to 6.
The Reports & Analytics page. Numbers match the list below.
  1. Page buttons: Take snapshot (record today's figures now) and Downloads.
  2. Tabs: Executive summary, Framework compliance, Risk report, Tasks, Evidence, Monitoring, Assessments, Vulnerabilities, Trends, Downloads and Schedules.
  3. Headline figures: overall readiness, open risks above appetite, failing automatic checks and assessments in progress.
  4. Summary cards: Readiness by framework, Biggest gaps, Open risks by residual level, and summaries of tasks, evidence, monitoring and assessments. The other tabs go into detail, for example the framework compliance table (Ref, Requirement, Control, Status, Owner, Evidence, Last evidence), risk heat maps, tasks by assignee and automatic check pass rates.
  5. Trends: overall readiness, readiness by framework, tasks completed per month, and critical and high vulnerabilities per scan, over 1 to 24 months.
  6. Schedules: each scheduled report with how often it runs, recipients, next and last run, and status.

How to download a report

  1. Select Downloads (or open the Downloads tab).
  2. Find the report you want. If it offers a framework choice, pick one or leave All active frameworks.
  3. Select PDF, XLSX or CSV. The file downloads straight away.

How to review compliance for one framework

  1. Open the Framework compliance tab.
  2. Choose the framework under Framework, and type in Filter to narrow the list.
  3. Select a column heading to sort. Select PDF or XLSX to download the view.

How to see trends over time

  1. Open the Trends tab.
  2. Choose a Period (1, 3, 6, 12 or 24 months).
  3. If you need today's figures included right away, select Take snapshot. Snapshots are otherwise recorded every night.

How to schedule a report

  1. Open the Schedules tab and select New schedule.
  2. In Report schedule, choose the Report, the Framework (or All active frameworks) and How often.
  3. Enter the Recipients, separated by commas or new lines. Each gets their own link.
  4. Leave Active ticked and select Save. Reports are sent at the nightly run on or after 06:00 UTC on the scheduled day.

How to check tasks, evidence and checks

  1. On Tasks, set Created or completed from and to and select Show. Open tasks are always included.
  2. On Evidence, review Implemented controls with no evidence and Expiring or expired, and download the Evidence index XLSX.
  3. On Monitoring, review each automatic check's last result and pass rate.

Tips

  • Start with Executive summary. The Biggest gaps list ranks controls that are not yet implemented by how many frameworks they count toward.
  • Readiness counts implemented controls out of applicable ones. Not applicable controls are left out, and in-progress controls are shown but not counted.
  • The residual heat map shows open risks after treatment; the inherent heat map shows them before treatment.
  • The person who last saves or resumes a schedule owns it. If they lose access, or a recipient falls outside your allowed email domains, the schedule pauses and compliance administrators are emailed.
  • Every download is recorded in the activity log.

Troubleshooting

  • "No frameworks are active." Choose your frameworks on the Compliance Frameworks page first.
  • A PDF button says "Print view". PDF files cannot be produced right now. Open the print view and use your browser's Save as PDF.
  • A download says "Your GRC role does not include exports." Ask an administrator for export permission.
  • "No snapshots yet." Snapshots are recorded nightly. Select Take snapshot to record one now.
  • "Automatic checks are not set up for this company." Set up Automatic Checks to see monitoring figures.

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.