Contents
Overview
IT Audit Machine has a number of built-in report types that are designed to marshal the large pool of compliance data and turn it into meaningful information on various aspects of your efforts to achieve compliance. Although each report type brings you a different view of the available data, they do overlap in some areas and also share some features designed to make interacting with the reports more efficient and intuitive.
In this section, we will discuss some of the shared report features in ITAM that facilitate manipulation of the report data as well as the different types of Reports and their purposes.
Report Features
There are a number of features shared across some Report Types that can assist you when viewing the data in a Report.
Data Sorting
The reports that present data in a table format allow for the data to be sorted by clicking on the title of a column. The direction of the sort will be indicated by a small blue arrow pointing up for ascending and down for descending. Clicking on the title of a column again will change the direction of the sort using that column.
Data Filtering / Search
The reports that present data in a table format allow for the data to be filtered by using the Search field on the top left of the data. Typing anything into the Search field will immediately filter the data by matches in any of the displayed fields.
Saving a data set while filtered will only save out the records included in the filter. If a report is providing more information than you desire, this is a great way to export just the data you are interested in seeing.
Pagination
The reports that present data in a table format will often include pagination at the bottom of the report. When pagination is included in a report the data will be grouped in “pages” of data made up of 20 records. On the left, the report will denote which records are being displayed as well as the total number of available records. Any filtering affecting the results will be communicated as well. On the right, the current page will be displayed as well as additional pages which represent navigation options to move to the represented pages. Simply click on the number of a page to move directly to that page of results.
For larger data sets, you may need to click on a number closer to the page you wish to view and then click on the actual page once it is displayed.
Save As
The reports that present data in a table format allow for the data to be exported in three main formats: CSV, Excel, and PDF. To save in one of those formats, simply click on the appropriate Save as button and ITAM will generate an export in that format and initiate a download.
Exporting to CSV or Excel can be an excellent way to use an external spreadsheet program to further manipulate the data or to ingest it into another system.
Only the data included in the current filter (i.e. the current search results) will be included in the export.
Interactive Charts
Many of the reports include graphical elements and charts. These elements are often interactive, allowing you to gain more detailed information on an element or highlight a specific detail.
On any report with a chart or graph, mouse over the chart and click on data elements. This will often bring up additional information.
Report Header Summary
Many Reports display a header at the top which includes details about when the report was generated and what the source of the data was. This is meant to give additional context to the data in the report and to quickly allow you to verify that it conveys information from the intended data set.
Report Types
[Back To Top]
There are ten (10) types of reports provided in the IT Audit Machine. Each is designed to provide an overview of compliance and/or answer common needs you or auditors might have with respect to the data in the forms to which your organization has been granted access. The types of reports are listed below as well as an overview of what data and insights data and insights they provide.
Audit Dashboard
The Audit Dashboard report returns a detail of auditable actions by both Portal and Administrative users. It is designed to allow for a quick review of the actions taken including the related timestamp and also has the ability to export the data for review outside of ITAM. There are separate views that detail actions by Administrative Users and Portal Users respectively.
Some of the uses for this report may be to determine who has taken a particular action in the system or to see what auditable actions a particular user did at a particular time.
Use the Search field to quickly focus the report on a particular user, Form #, or date
Artifact Management
The Artifact Management Report lists the artifacts associated with the forms the user can access. An artifact is an external file that has been uploaded and associated with the form, like an image or document. It shows the file name of the artifact, the form with which it is associated, the field on the form, and contains a link to the field to view it directly. This report is designed to allow you to view, in a single place, all of the artifacts on a form, so you can quickly see if any artifacts are missing or find a particular artifact related to a specific form.
This report has some interactive features which are different than a number of the other reports. All of the artifact file names are represented as links. Clicking on the file link will display a preview of the file and give you an option to download it. The report also includes a Go To Field column for each row. Clicking on the link in that column will take you directly to the field in the form where the artifact was uploaded.
Searching/Filtering on part of a Form Name or on a Form ID is a great way to limit the results down to those related to a particular form
Compliance Dashboard
The Compliance Dashboard report displays an entity’s calculated compliance percentages against the selected forms both as a current snapshot and over time. Compliance is based on the status of the fields in the selected forms. Each field in a form can be set to be in one of four statuses: Pending (Gray), In Remediation (Red), In Progress (Yellow), Compliant (Green). For more information about status indicators and how they are used see the Form Status Indicators section of the guide.
The report consists of a header and three (3) main views of the compliance history and status of the chosen entity against the chosen forms. Below the header, the report will display two summary graphs and a detail section for each form.
The top summary graph shows the overall compliance status over time so you can get a high-level view of the entity's progress toward compliance. The top line represents the Maturity score and the bottom is the Risk Score. Each line can be hidden or displayed by clicking on the field in the legend under the chart.
The second summary graph shows the current compliance status in graphical form. The Status Score displays the number of fields in each status and the score is the ratio of compliant fields to the total number of fields. Risk is calculated based on the score of compliant controls (green) vs less compliant scores. Maturity is a calculation involving risk percentage and the number of compliant fields.
A higher Status Score is better, showing better progress toward completion and compliance.
A lower Risk Score is preferable, indicating a lower level of risk in the monitored system.
A higher Maturity Score is desired, showing an entity has mitigated risk well and has made better progress toward compliance.
Finally at the bottom is an accordion-type detail that allows for viewing the fields which are in each status state, displayed by the color associated with that status.
Expanding a status will allow you to view the fields in that status.
See the Form Status Indicators page for more details about each status.
Executive Overview
The Executive Overview Report is a high-level version of the Compliance Dashboard, giving the big picture of compliance for the forms selected without the field-level detail. The report consists of a section for each selected form giving a timeline and summary of the compliance status. See the section on the Compliance Report for more detail about each chart.
The Executive Overview report does not provide the detail about which field is in which status, but otherwise provides the same data as the Compliance report.
Field Data
The Field Data Report takes one or more field(s) and charts the aggregate value across the chosen fields over time. This is one of the more flexible reports and the data displayed will be based on the fields and aggregation type chosen by the Administrator when the report was created.
The Chart Type and the Computation type selected for the aggregation will be displayed at the top of the report.
The data supporting the chart will be displayed at the bottom of the report.
Action ITAMs
The Action ITAM Report provides a detail of the Action ITAMs created for a form. This report actually serves two purposes. One is to provide you with a quick way to review and download a copy of the Action ITAMs on one or more forms. This can be helpful to review an overview of the Action ITAMs or share them with a colleague. The second is interactive and allows you to jump directly to the fields with Action ITAMs on them and either update the field or update the Action ITAM on the field.
Maturity
The Maturity report gives a look at the Maturity score and the other scores which impact it.
It displays graphs of the Status, Risk, and Maturity scores for the forms selected as well as a detail section displaying the score for each field and a representative risk percentage, which is one of the key metrics for maturity.
Risk Scores
The Risk Scores Report gives a more detailed look at the risk scores on one or more forms. In addition to the typical header, the report includes a section for each form displaying a line graph of the chosen type plotting the risk scores, and also a chart with the related data.
Status Indicators
The Status Indicators Report displays and charts the various states of the status indicators on the forms selected. The top graph and chart compare the number of fields in each status type using the type of graph selected for the report. The accordion control at the bottom of the report allows you to view the specific fields in each status as desired.
This report gives a good overview of the comparative status of the fields with the ability to dig into the detail.
Template Code Report
The Template Code Report provides a list of the template codes for the selected forms that can easily be downloaded as a reference or for later use. Templates are used to create downloadable documents from the form data, and template codes are used to inject data from the report into a template. The Template Code Report can create a handy reference for creating or modifying templates for various forms.
In this section, we discussed the Report Types and their purposes as well as some of their common features. In the next section, we will discuss the My Profile page and how it can be used to manage aspects of your profile within ITAM.
[Previous Topic → My Reports] | [Next Topic → My Profile]
Portal User Guide
Overview
Accessing ITAM
My Dashboard
Action ITAMs
My Forms
Form Data Entry
Data Control Groups
Form Entries
Form Status Indicators
File Manager
My Documents
My Reports
Report Types
My Profile
Add Comment