How to Interpret Your Risk Report
A guide to reading and acting on your TrustCyber risk report, including how to prioritize findings, understand the remediation roadmap, and present results to leadership.
Your TrustCyber risk report is structured in four sections: Executive Summary, Domain Score Breakdown, Findings Table, and Remediation Roadmap. This guide explains how to read each section and what actions to take based on the results.
Executive Summary
The Executive Summary provides a plain-language overview of your organization's security posture. It includes your four primary scores, a one-paragraph narrative describing your key risks, and a list of the top three recommended actions. This section is designed to be shared with non-technical leadership and board members.
Domain Score Breakdown
The Domain Score Breakdown shows your score for each of the 8 security domains, displayed as a horizontal bar chart. Domains are color-coded: green (70-100), amber (40-69), and red (0-39). Focus remediation efforts on red and amber domains first, as they contribute most to your overall Risk Score.
Findings Table
The Findings Table lists all security gaps identified in your assessment, sorted by severity. Each finding includes a title, severity level (Critical, High, Medium, Low), affected domain, description of the risk, and a recommended remediation action.
| Severity | SLA | Action Required |
|---|---|---|
| Critical | 24-48 hours | Immediate remediation. Escalate to security team and leadership. |
| High | 7 days | Remediate within one week. Assign to responsible team member. |
| Medium | 30 days | Schedule remediation within the month. Include in sprint planning. |
| Low | 90 days | Address in next quarterly review. Document acceptance if not remediating. |
Remediation Roadmap
The Remediation Roadmap organizes your findings into three phases: Now (Critical and High findings), Next (Medium findings), and Later (Low findings). Each finding in the roadmap includes an estimated effort level (Low, Medium, High) and an estimated score improvement if remediated.
Presenting Results to Leadership
When presenting your TrustCyber report to leadership or the board, focus on the Executive Summary scores and the top three recommended actions. Avoid presenting the full findings table to non-technical audiences — instead, summarize the number of critical and high findings and the estimated timeline and cost to remediate them.