Management reporting

Board-ready, in the language of the standards.

Each month every customer receives a branded PDF that tells management how exposed they are, what changed and what they need to decide. It is backed by the frameworks their auditors and insurers already use.

  • Executive summary in plain language, written for directors rather than engineers.
  • NIST CSF 2.0 scorecard across Govern, Identify, Protect, Detect, Respond and Recover.
  • Key metrics mapped to CSF and CIS Controls v8, with targets and trends.
  • 5 × 5 risk register plotting likelihood against impact, with owners.
  • Decisions needed: the few things only management can approve.
  • Threat landscape: the month's zero-days and campaigns that matter to them.
  • Portfolio report across all customers, for your own leadership.
NIST CSF 2.0CIS Controls v8CISA KEVFIRST EPSS
Monthly security report
Northwind Traders · September 2026 · Sample
KAGEMORI

NIST CSF 2.0 scorecard

GovernTier 2 · Risk informed
IdentifyTier 3 · Repeatable
ProtectTier 2 · Risk informed
DetectTier 3 · Repeatable
RespondTier 3 · Repeatable
RecoverTier 1 · Partial

Risk register

Decisions needed

  1. Approve patching of 6 laptops exposed to an actively exploited Office flaw.
  2. Fund Entra ID P1 for 40 users to enable risky sign-in protection.
  3. Name an owner for the backup recovery test due in Q4.
Kagemori logo

Put a guardian on every tenant.

See Kagemori with your own Microsoft 365 tenant in a 30-minute demo. Connect a test tenant during the call and see real data before it ends.