For CISOs · quarterly cadence
Board pack template.
A board-ready quarterly cyber posture report. Cover, executive summary, six-module breakdown, supply-chain hotspots, and an action plan. Use it as scaffold; the in-product Board Pack auto-fills every section.
Cover & executive summary.
One page. Three numbers. The board reads no further than this unless something is on fire.
- 01Company rating — letter grade + numeric, with delta vs last quarter.
- 02Critical findings open — count, ageing, named owner.
- 03Supply-chain hotspots — top three vendors by risk contribution.
- 04One paragraph — what changed, why, what we’re doing.
Six-module breakdown.
One page per module. Score, trend line, top three open findings, remediation status. Designed to be read in four minutes by a non-technical director.
Brand protection
Domain security
Attack surface
Network security
Cloud security
Compliance posture
Supply-chain hotspots.
Two pages. Top ten vendors by risk contribution to your aggregate posture. Highlights vendors trending downward, vendors that breached SLA on remediation, and any vendor with a public security incident in the quarter.
Action plan.
One page. Five rows. Each row is a specific action, with a named owner, a due date, and a measurable expected impact on the rating. No vague “continue to improve” verbs.