Six documents, each composed for a different question, and the comparison of every run with a reference run.
Six documents, not six styles
Documents the node end to end as a technical record.
Shows what needs attention without the complete inventory.
Describes what exists on the node without assessing it.
Covers exposure and the controls over access to the node.
Checks that the declared protection exists and that its backups are usable.
Measures growth margin and signs of exhaustion or ageing.
A document contains the identity of the node and the date of the assessment, the executive result, a summary by area, the structure of hardware, network and storage, the protection of the guests, the findings with their evidence, the sources that could not be read, and the scope and policy applied, in the measure each profile includes them.
An assessment runs with the profile selected in Report.
The finished run shows its findings, the sources it could not read and the policy it applied.
Generate report opens the view prepared as a document.
Print or save as PDF opens the print dialog of the browser, where a printer or Save as PDF is selected.
The printout is a document, not a screenshot
Use as reference marks a finished run as the reference. Later runs are compared with it and their findings are separated into:
| Group | Meaning |
|---|---|
| New | Reported now and not before. |
| Worse | Still reported, and graver or reaching further than before. |
| Better | Still reported, but less grave or reaching less far than before. |
| Resolved | No longer reported, and nobody accepted them. |
| Accepted | No longer counted because a risk was accepted, not because the host changed. |
| No longer assessed | Present before and absent from this run; nothing verified that they stopped. |
| Reference run | Behaviour |
|---|---|
| Setting it | Any finished run can be marked; none is marked automatically. |
| Changing it | Marking another run moves the reference without deleting the history. |
| Comparing | When no two runs are selected, the comparison uses the reference and the selected or most recent run. |
| Keeping runs | The 30 most recent runs are kept, and the reference run is never removed. |
| Without a reference | The view states that no reference run has been chosen yet, so there is nothing to compare against. |
A report describes one moment
