Reports and Sending to Auditors

Duration20 minOfferModule Conformité

Objectives

• I know the content of the RSSI, CTO, and ISO 27001 reports
• I can find an archived month in the history
• I know how to set up automatic delivery to external recipients
• I understand the rules of the sent link

0 / 4 objectives achieved — check them off as you go through the lesson.

Why It's Useful

Management wants a monthly summary, the auditor wants a dated proof. The reports are generated from the audit trail and frozen on the first day of each month: even when raw events have expired, the month remains accessible. The automatic delivery sends them to those who do not have a VaultysHub account.

Your Turn

1. Go to Compliance › Reports. → Reports
2. Open the RSSI report, then the CTO report, then the ISO 27001 — Access Control report. Print one or download it as a PDF.
3. Below the cards, browse the History of archived months.
4. Click on Automatic Delivery in the toolbar. → Automatic Report Sending
5. Enable Send reports by email each month, add your own address as an external recipient, check at least one report, and then click Save.
6. Back on the tab, check the green badge Sent by email each month to N external recipient(s).

Report	For whom	Content
RSSI (monthly security)	Management, security	Access and provisioning, credential hygiene, incidents, Shadow IT, access governance
CTO (monthly operations)	Technical management	Adoption, application portfolio, files, licenses, Shadow IT
ISO 27001 — A.9	Auditor	Provisioning and deprovisioning, authentication policies, passwords, access rights

The sent link

The email contains a link without a password, valid for 30 days. Anyone who has the link can open the reports: only send it to trusted recipients.

Other Frameworks

For NIST CSF, SOC 2, GDPR, NIS2, DORA, and other frameworks, the section Need more frameworks? in the Reports menu offers integration with CISO Assistant from Intuitem.

Check Your Knowledge

1Should your administrators be added as recipients of the automatic delivery?

2How long is the sent link valid?

3Why is the Save button inactive?

4Why are reports frozen each month?

Key Takeaways

• Three reports: RSSI, CTO, and ISO 27001; other frameworks via CISO Assistant.
• Months are frozen and remain in the History.
• The automatic delivery sends a 30-day link, to be addressed only to trusted individuals.

Final step: Module Summary