Predefined report and dashboard descriptions

The Control Compliance Suite Reports and Dashboards include the default reports and dashboards that let you determine the state of the installation. You may be required to select settings before the report is run.

The result of a report or dashboard may vary based on your permission level.

Table: Report or Dashboard Descriptions

Name

Description

Location

Customization Support

Asset based Policy Completion Status

The report displays data on the policy completion status.

Report Templates

Yes

Asset Change Report

The report lets the user compare the two most recent results and display the differences.

Report Templates

Yes

Asset Compliance by Technical Check

The report lets users identify the most common failed or passed technical checks.

Report Templates

Yes

Asset Details Report

The report displays detailed information about the user's managed assets.

Report Templates

No

Asset Exception Status Report

The report displays a summary of exceptions that are in place across the IT infrastructure. The report can be used as an auditor report.

Report Templates

Yes

Asset Risk Summary

The report displays the asset type, the risk level, and the related technical controls for one standard.

Report Templates

Yes

Assets at Highest Risk

The report displays the assets that are given a rank that is based on the remediation order that is based on a risk score.

Report Templates

Yes

Comparison of Control Statement Mapping Report

The report lets you compare control statement mappings between the policies or between the policies and a mandate. The title of the generated report would be based on your selection.

A report that compares policies has the Comparison of Control Statement Mappings between Policies Report title.

A report that compares policies and a mandate has the Comparison of Control Statement Mappings between Policies and Mandate Report title.

Report Templates

No

Compliance-Exception Impact Analysis

The dashboard displays the compliance level of the selected asset group or folder using two pie charts.

The first chart displays the current compliance level with the 'pass', 'fail', and 'other' categories. The 'other' category is comprised of the checks that are exempted, manual review, and N/A.

The second chart displays the projected compliance level if all current outstanding exception requests were approved.

The dashboard also displays a risk gauge with the current risk score for the selected asset group or folder.

Dashboard Templates

No

Compliance Summary

The report lets users view the risk scores and the compliance status for an asset or an asset group.

Report Templates

No

Compliance Trend by Technical Standard

The dashboard displays the compliance trends for a maximum of four standards at a time. The dashboard displays two trend charts and a pie chart.

The first trend chart displays the 'pass', 'fail', and 'other' trends over time. The second chart displays the corresponding data as a percentage value.

The pie chart summarizes the current counts of 'pass', 'fail', and 'other' categories for all of the selected standards. The 'other' category is comprised of the checks that are unmapped, exempted, manual review, and N/A.

Ten trend points are plotted on the trend charts.

Dashboard Templates

No

Compliance Trends for Asset Group(s) or Folder(s)

The dashboard displays the compliance trends for a maximum of four asset groups or folders at a time. The dashboard displays two trend charts and a pie chart. The first trend chart displays the 'pass', 'fail', and 'other' trends over time. The second chart displays the corresponding data as a percentage value. The pie chart summarizes the current counts of 'pass', 'fail', and 'other' categories for all of the selected asset groups or folders. The 'other' category is comprised of the checks that are unmapped, exempted, manual review, and N/A. Procedural and technical controls are considered in the compliance scores and control status counts.

Ten trend points are plotted on the trend charts.

Dashboard Templates

No

Control Statement Mapping Report

The report lets policy content managers provide details on the interrelationships between a policy and the control statements. Auditors may use the report as documentation of the policy process. The report includes information on checks, questions, entitlements, and third party evidence.

Report Templates

No

CCS System Change Auditing Report

The report displays key Control Compliance Suite (CCS) change events. The change events may affect either the security of the CCS system and the configuration of the security assessment or policy-related information.

Report Templates

Yes

Effective Permissions Report

The report generates information about the detailed effective permissions of one or more control points.

Report Templates

No

Entitlement Changes Report

The report lets the user access information for the entitlements or group memberships from the most current evaluations and recently approved evaluations.

Report Templates

No

Failure Trends

The dashboard summarizes the failure trends of the selected asset groups or folders for a specific standard. The failure trends are displayed for the past 13 months which includes the current month.

Dashboard Templates

No

Gold Standard

The report assesses the compliance of a system to a Gold Standard system.

Report Templates

Yes

Overall Compliance

The report displays the individual check results for an asset or an asset group. The user can view, sort, or print the results.

Report Templates

Yes

Overall Compliance by Standard

The report displays the compliance status of technical checks for a single asset.

Report Templates

Yes

Overall Policy Compliance Score

The report lets users view roll-up compliance scores for technical checks and lists of technical checks. The report also displays procedural content for the assets that are mapped to the selected policies.

Report Templates

No

Policy Compliance

The dashboard displays the compliance levels of a maximum of four regulatory mandates. The mandates include regulations and frameworks. Each selected mandate is displayed with a pie chart. The 'other' category is comprised of the checks that are unmapped, exempted, manual review, and N/A. Procedural and technical controls are considered in the compliance score.

Dashboard Templates

No

Policy Results Report

The report displays information for selected policies. The report lets the user view asset information.

The user can view the following for selected policies:

  • Risk score

  • Risk rating

  • Technical checks

  • Procedural controls

Report Templates

No

Policy Summary Report

The report displays a summary of a policy.

Report Templates

Yes

Remediation Report

The report displays remediation information for one or more asset groups or folders for the latest evaluation.

Report Templates

No

Simple Permissions Report

The report displays an audit trail of the explicit ACL on control points. The report displays the raw permissions that are granted in the operating system and the application. The report can be used to reconcile effective permissions with the ACL itself.

Report Templates

No

Technical Checks Report

The report reviews the technical checks that are applied to the IT infrastructure.

Report Templates

No

Technical Checks Results Details

The report displays risk scores and compliance status or technical checks for an asset group for the last evaluation.

Report Templates

Yes

Technical Control compliance-Risk for Asset Groups or Folders

The dashboard lets you view the risk and the compliance for a maximum of four asset groups or folders. The risk and the compliance information for each asset group or folder is displayed in a separate pie chart or gauge.

Dashboard Templates

No

Top Failed Technical Checks Report

The report identifies which checks failed the most frequently. The checks are across a set of assets for the latest evaluation during the date range.

Report Templates

Yes

Trustee Permissions Report

The report displays information about the permissions of a trustee within the context of managed control points in the Entitlements module.

Report Templates

No