Asset based Policy Completion Status
|
The report displays data
on the policy completion status.
|
Report Templates
|
Yes
|
Asset Change Report
|
The report lets the user compare the two most recent results and
display the differences.
|
Report Templates
|
Yes
|
Asset Compliance by Technical Check
|
The report lets users identify the most common failed or passed
technical checks.
|
Report Templates
|
Yes
|
Asset Details Report
|
The report displays
detailed information about the user's managed assets.
|
Report Templates
|
No
|
Asset Exception Status Report
|
The report displays a
summary of exceptions that are in place across the IT
infrastructure. The report can be used as an auditor report.
|
Report Templates
|
Yes
|
Asset Risk Summary
|
The report displays the
asset type, the risk level, and the related technical controls for
one standard.
|
Report Templates
|
Yes
|
Assets at Highest Risk
|
The report displays the
assets that are given a rank that is based on the remediation order
that is based on a risk score.
|
Report Templates
|
Yes
|
Comparison of Control Statement Mapping Report
|
The report lets you compare control statement mappings between
the policies or between the policies and a mandate. The title of
the generated report would be based on your selection.
A report that compares policies has the Comparison of Control
Statement Mappings between Policies Report title.
A report that compares policies and a mandate has the Comparison
of Control Statement Mappings between Policies and Mandate Report
title.
|
Report Templates
|
No
|
Compliance-Exception Impact Analysis
|
The dashboard displays the compliance level of the selected
asset group or folder using two pie charts.
The first chart displays the current compliance level with the
'pass', 'fail', and 'other' categories. The 'other' category is
comprised of the checks that are exempted, manual review, and
N/A.
The second chart displays the projected compliance level if all
current outstanding exception requests were approved.
The dashboard also displays a risk gauge with the current risk
score for the selected asset group or folder.
|
Dashboard Templates
|
No
|
Compliance Summary
|
The report lets users view the risk scores and the compliance
status for an asset or an asset group.
|
Report Templates
|
No
|
Compliance Trend by Technical Standard
|
The dashboard displays the compliance trends for a maximum of
four standards at a time. The dashboard displays two trend charts
and a pie chart.
The first trend chart displays the 'pass', 'fail', and 'other'
trends over time. The second chart displays the corresponding data
as a percentage value.
The pie chart summarizes the current counts of 'pass', 'fail',
and 'other' categories for all of the selected standards. The
'other' category is comprised of the checks that are unmapped,
exempted, manual review, and N/A.
Ten trend points are plotted on the trend charts.
|
Dashboard Templates
|
No
|
Compliance Trends for Asset Group(s) or Folder(s)
|
The dashboard displays the compliance trends for a maximum of
four asset groups or folders at a time. The dashboard displays two
trend charts and a pie chart. The first trend chart displays the
'pass', 'fail', and 'other' trends over time. The second chart
displays the corresponding data as a percentage value. The pie
chart summarizes the current counts of 'pass', 'fail', and 'other'
categories for all of the selected asset groups or folders. The
'other' category is comprised of the checks that are unmapped,
exempted, manual review, and N/A. Procedural and technical controls
are considered in the compliance scores and control status
counts.
Ten trend points are plotted on the trend charts.
|
Dashboard Templates
|
No
|
Control Statement Mapping Report
|
The report lets policy content managers provide details on the
interrelationships between a policy and the control statements.
Auditors may use the report as documentation of the policy process.
The report includes information on checks, questions, entitlements,
and third party evidence.
|
Report Templates
|
No
|
CCS System Change Auditing Report
|
The report displays key Control Compliance Suite (CCS) change
events. The change events may affect either the security of the CCS
system and the configuration of the security assessment or
policy-related information.
|
Report Templates
|
Yes
|
Effective Permissions Report
|
The report generates
information about the detailed effective permissions of one or more
control points.
|
Report Templates
|
No
|
Entitlement Changes Report
|
The report lets the user
access information for the entitlements or group memberships from
the most current evaluations and recently approved evaluations.
|
Report Templates
|
No
|
Failure Trends
|
The dashboard summarizes the failure trends of the selected
asset groups or folders for a specific standard. The failure trends
are displayed for the past 13 months which includes the current
month.
|
Dashboard Templates
|
No
|
Gold Standard
|
The report assesses the
compliance of a system to a Gold Standard system.
|
Report Templates
|
Yes
|
Overall Compliance
|
The report displays the
individual check results for an asset or an asset group. The user
can view, sort, or print the results.
|
Report Templates
|
Yes
|
Overall Compliance by Standard
|
The report displays the
compliance status of technical checks for a single asset.
|
Report Templates
|
Yes
|
Overall Policy Compliance Score
|
The report lets users
view roll-up compliance scores for technical checks and lists of
technical checks. The report also displays procedural content for
the assets that are mapped to the selected policies.
|
Report Templates
|
No
|
Policy Compliance
|
The dashboard displays the compliance levels of a maximum of
four regulatory mandates. The mandates include regulations and
frameworks. Each selected mandate is displayed with a pie chart.
The 'other' category is comprised of the checks that are unmapped,
exempted, manual review, and N/A. Procedural and technical controls
are considered in the compliance score.
|
Dashboard Templates
|
No
|
Policy Results Report
|
The report displays information for selected policies. The
report lets the user view asset information.
The user can view the following for selected policies:
-
Risk score
-
Risk rating
-
Technical checks
-
Procedural controls
|
Report Templates
|
No
|
Policy Summary Report
|
The report displays a
summary of a policy.
|
Report Templates
|
Yes
|
Remediation Report
|
The report displays
remediation information for one or more asset groups or folders for
the latest evaluation.
|
Report Templates
|
No
|
Simple Permissions Report
|
The report displays an
audit trail of the explicit ACL on control points. The report
displays the raw permissions that are granted in the operating
system and the application. The report can be used to reconcile
effective permissions with the ACL itself.
|
Report Templates
|
No
|
Technical Checks Report
|
The report reviews the
technical checks that are applied to the IT infrastructure.
|
Report Templates
|
No
|
Technical Checks Results Details
|
The report displays risk
scores and compliance status or technical checks for an asset group
for the last evaluation.
|
Report Templates
|
Yes
|
Technical Control compliance-Risk for Asset Groups or
Folders
|
The dashboard lets you view the risk and the compliance for a
maximum of four asset groups or folders. The risk and the
compliance information for each asset group or folder is displayed
in a separate pie chart or gauge.
|
Dashboard Templates
|
No
|
Top Failed Technical Checks Report
|
The report identifies which checks failed the most frequently.
The checks are across a set of assets for the latest evaluation
during the date range.
|
Report Templates
|
Yes
|
Trustee Permissions Report
|
The report displays information about the permissions of a
trustee within the context of managed control points in the
Entitlements module.
|
Report Templates
|
No
|