The reports module is used to view graphical reports based on the results of assessments. Reports allow you to observe trends as you run the same type of assessment multiple times. The assessments are tracked based on assessment type. For organizational assessments, the results are broken down on a per-OU basis.
For example, imagine you have an assessment type called “Annual Campus-wide Risk.” The assessment is run once yearly and includes all OUs, and the assessment has been run four times. You can view scores for each OU and note how each OU has trended for the last four years, and you can compare how each OU is doing versus the others.
Reports are grouped by assessment type, then broken down on a per OU basis. For each OU, there is a separate line for each report. Once a survey has been signed off for an assessment, a report is generated. If the assessment has not yet been completed, then some of the statistics in the report might not be accurate. The reports are dynamically updated as more data becomes available.
To view an individual report, click the name of the assessment that the report corresponds to.
Each report has three sections- a summary, hosts section, and org unit questions section. In the summary section, you can see the current risk score for the OU, as well as some information about how the score has changed since the previous instance of the assessment.
In the hosts section, you can visualize the breakdown of host categorization, represented in a donut chart. Confidential hosts have their data further classified, which is shown on a radar graph. The exact categories and classifications may differ in your organization from what is shown in the example report.
The last section of the report is the org unit questions. Questions are grouped into categories, and the graph shows how this OU scored each category compared to the organization as a whole. You can expand each category of questions to see the individual questions in that category and how they were scored.
Administrators can view all reports. People who are organizational unit heads, assessment managers or IT staff for a specific OU can also view reports for just that OU. As soon as the first survey of an assessment is completed, reports start to be automatically generated by Isora GRC.
If an OU has children that are included in the assessment, you can click the “include child org units” link to view a comprehensive report that includes results from child OUs along with the parent.