This section provides orientation on risk reports provided by Modulo, including how to edit them to meet your organization's needs and how to schedule them to be sent automatically.
One of the main challenges for security and risk managers is to quickly obtain a consolidated overview of risks. Much more than an audit report, the system allows you to generate your own reports to present the results of one or more projects using graphs, tables, and text. Based on these, the decision-making process concerning investments and prioritizations for implementing controls can be optimized. Keep in mind that if the same asset component is analyzed in more than one project included in the report, the report will only display the analysis results for this component resulting from the latest closed questionnaire. For example, consider that Project A and Project B, both containing the same asset component, were included in the scope of a report and Project B was analyzed most recently (that is, this project had one of its questionnaires answered and closed last). In this case, the information displayed in the report for this asset component will be obtained from project B.
Note that reports can also be generated directly from a project by simply selecting the template to be used. The difference in this section is that you will select the project (or several projects, if you want to generate a consolidated report) first before generating the report, and you can also use disabled templates (those not yet released for use) to generate reports for test purposes. For details on the four types of reports and how to generate them within projects, see Chapter 5: Risk -> Risk: The Analysis Phase -> Overview of Risk Reports.
You can also schedule a report to be sent by specifying the recipients, the date on which they will begin to be sent, the frequency with which they will be sent, and the number of times this will occur. For example, if you want to receive a weekly report on the risks in your IT network, you can schedule a report that is filtered to include only analysis information related to your network. A daily time must be set in the Administration module for sending these reports. For details on how to set this time, see Chapter 17: Administration -> Scheduled Reports.