Reports & Exports

CMDash provides multiple ways to produce structured outputs from your posture, compliance, risk, and remediation data — ranging from one-click board snapshots to fully customized report builds.

Board Snapshot PDF [Essentials+]

The Board Snapshot is a pre-formatted, one-page PDF designed for executive and board audiences. It is generated with a single click and requires no configuration.

The Board Snapshot includes:

• Current Posture Grade and score
• Signal-by-signal breakdown with trend arrows (up/down vs. last period)
• Compliance framework completion percentages
• Top 3 open risks (title and normalized score)
• Count of open critical vulnerabilities and their MTTR
• Count of open incidents in the last 30 days
• Key metrics from the previous period for comparison

To generate:

1. Navigate to Reports.
2. Click Board Snapshot PDF.
3. Select the reporting period (defaults to the current month).
4. Click Generate. The PDF is ready for download in seconds.

Board Deck .pptx [Command+]

The Board Deck is a multi-slide PowerPoint presentation suitable for a full board or executive committee presentation. It is configurable and supports custom branding.

Included slides (configurable):

• Title slide with organization name, date, and presenter
• Executive summary with Posture Grade and narrative
• Posture Score trend (30 or 90-day chart)
• Signal detail page for each of the five signals
• Top risks summary (Risk Register excerpt)
• Compliance framework status by framework
• Remediation progress summary
• Benchmarking comparison slide [Command+]
• Recommendations and next steps

To generate:

1. Navigate to Reports and click Board Deck .pptx.
2. Select slides to include and configure branding (logo upload, color scheme).
3. Select the reporting period and date range for trend charts.
4. Click Generate. The .pptx file downloads when ready (generation typically takes 10–30 seconds).

Branding configuration (logo, colors) is saved for your workspace and applied to all future Board Deck exports until changed.

Custom Report Builder [Command+]

The Custom Report Builder allows you to assemble a report from individual metric and data components, selecting exactly what to include.

Available components:

• Any Posture signal metric (current value, trend, grade)
• Any compliance framework's domain or full framework completion
• Risk register table (filterable by status, score range, owner, tags)
• Remediation task table (filterable by status, owner, due date)
• Integration health summary
• Insight metric cards
• Policy compliance status
• Custom text blocks (add your own commentary or context)

To build a report:

1. Navigate to Reports > Custom Report Builder.
2. Click New Report and give it a name.
3. Add components using the Add Block button. Arrange them by dragging.
4. For each component, configure its parameters (date range, filters, display format).
5. Preview the report, then Download as PDF or schedule it for delivery.

Custom report configurations are saved and can be reused or cloned for future reporting cycles.

Scheduled Reports

Any report configuration — Board Snapshot, Board Deck, or Custom Report — can be scheduled for automatic generation and delivery.

To schedule a report:

1. Open any report configuration and click Schedule.
2. Set the cadence: daily, weekly (select day of week), or monthly (select day of month).
3. Set the delivery time and timezone.
4. Add recipient email addresses. Recipients do not need to be CMDash workspace members to receive scheduled reports.
5. Click Save Schedule.

Scheduled reports are listed in Reports > Scheduled Reports. You can pause, edit, or delete a schedule at any time. A record of each delivery attempt (success or failure) is visible in the schedule detail.

Data Export

For integration with external tools, raw data export is available in CSV and JSON formats. Navigate to Reports > Export Data.

Available export types:

• Risk Register — all risks with all fields, including likelihood, impact, score, status, owner, tags, and linked controls
• Compliance Controls — all controls across selected frameworks with current status, owner, and evidence counts
• Remediation Tasks — all tasks with linked risk, owner, due date, and status
• Evidence Items — metadata for all evidence items (source, control, date, description)
• Policy Records — all policies with version, status, and attestation history

Select the export type, configure filters, and click Export. Large exports are generated in the background; you receive an in-app notification when the file is ready for download.

POA&M Export [Starter+]

The Plan of Action and Milestones export is detailed in Remediations. It is accessible from both the Remediations section and the Reports section.