Reporting and dashboards
Dashboards that read your current records. Reports your cyber expert signs off.
Dashboards cover cyber risk and vendor risk, and every number has a written definition. Reports are drafted by VectraIQ and reviewed by your cyber expert before they reach you.
Cyber risk dashboard
ExampleCyber risk score
72%
Maturity across your frameworks
Active issues
18
A few high or critical
Needs attention
3
Overdue and serious
Compliance status
81%
Control implementation
Dashboards
Two dashboards, no data entry.
Both dashboards read your current records and show your company only.
Cyber risk dashboard
Executive summary
Headline figures, open versus closed over the last year, and your top issues and risks.
Risks and issues
Each register broken down by category and by owner, with the top items first.
Owners
What is assigned, what is unassigned, what is overdue, and how long items take to close.
Frameworks
One framework or all of them, with issues, risks, implementation and score side by side.
Vendor risk dashboard
Executive summary
Your overall vendor risk score and trend, open vendor issues and risks, the weakest-scoring vendors and how many are critical.
Assessments
What is in progress, what is coming up for reassessment, what is overdue, and how long assessments take.
Security monitoring
One vendor at a time: its external posture, whether a cyber incident has been detected, and a summary of the checks.
How vendors are assessed and monitored is covered under third-party risk.
Definitions
Every number has a plain definition.
If a number in the board pack is questioned, your cyber expert can point to its definition. Three examples:
- Needs attention
- Active issues and risks that are overdue and serious.
- Cyber risk concentration
- The share of your active risks that are still rated high after controls.
- Unmitigated risk exposure
- The share of your active risks with no treatment decided.
What a reading looks like
ExampleA quarter of your active risks are still rated high after controls.
That is cyber risk concentration. Your cyber expert would look at which controls would bring those risks down first, and put the answer in front of your leadership with the number.
Risk assessment report
Available once an assessment is completed. It includes:
- A cover and an executive summary with inherent risk, residual risk and the overall score
- A company overview with the frameworks used and the issues and risks found
- Every identified issue and risk, one card each
- The assessment scope, method and documents reviewed
Board report
VectraIQ drafts a board report in seconds from your current risk, vendor and control data. Your cyber expert checks it, adds context, and sets priorities with you. You present the finalized version.
Because the draft reads the same records as the dashboards, the headline figures in the report match the screen your leadership can open.
Expert review
Vendor assessment reports follow the same rule: VectraIQ drafts, your cyber expert reviews, edits and publishes, and nobody outside your expert team sees it before then. The step-by-step flow is on third-party risk. VectraIQ also writes insights that show on these dashboards, refreshed when your team signs in each day. See how VectraIQ generates insights. Controls and framework scores behind the numbers are explained in frameworks and controls.
What you get
Things you can forward.
PDF reports
Download a completed report.
CSV exports
Controls, documents and policies export to CSV.
Trend lines
Open versus closed over the last year, and your vendor risk score over time.
Drill-through
Top issues and risks link to the registers, so a number on the dashboard always leads to the record behind it.
Your data is kept separate from every other customer’s, as described on the security page.
Questions, answered.
Can we build our own dashboards?
The two dashboards are fixed views of your current records, so the board pack always matches the screen. For a different cut, your cyber expert prepares it with you.
Can we see a sample report?
The outline of each report is on this page and on the risk assessments page. Talk to us and we will walk you through the real screens and a finished report.
Do we see a vendor report before it is reviewed?
No. Your cyber expert reviews and publishes it first, and your contacts are notified only after that.
Who finalizes the board report?
VectraIQ drafts it in seconds from your current risk, vendor and control data. Your cyber expert reviews and finalizes it with you before it goes anywhere.
More in the platform
Explore the rest of the platform.
- Risk assessmentsRun a risk assessment, score it, and turn the findings into issues and risks.
- Third-party riskAssess vendors, tier them by criticality and keep watching them between reviews.
- Risk managementA risk register with owners, treatment and progress, rolled up into dashboards.
- Audit and compliancePolicies, controls and evidence kept current, so audit prep is a review.
- Frameworks and controlsOne control library mapped across the frameworks you report against.
- VectraIQThe AI inside the platform: ask where you stand, get insights, draft reports.
Put a board report in front of your leadership team.
Tell us what your board or executives ask for and a lead expert will show how the dashboards and reports would answer it.