Kit · Compliance
Monthly report & KPI kit
The report is the artefact that proves the function works. This kit gives the production procedure, the pre-release quality gate, and the discipline that gets it out on the same date every month rather than the last date anyone can tolerate.
- Cadence
- Monthly
- Rule
- Same date, every month
- Output
- Issued report + evidence pack
Fix the date before you fix the content
A report that arrives on a predictable date gets read. A report that arrives when it is ready gets skimmed, then eventually gets skipped, and the first time anyone notices is when a supervisory review asks for twelve consecutive editions and you have nine.
Pick the working day of the month it is issued, and hold it even when the month was quiet. Especially when the month was quiet — a quiet month with a clean report is evidence; a quiet month with no report is indistinguishable from not looking.
Data harvest
Collect first, interpret second. Mixing the two is how numbers get massaged.
Pre-release quality gate
Read your own report as the recipient. Every one of these is a question they will otherwise ask you.
The sections that carry the weight
| Section | What it is really for |
|---|---|
| Glossary | Making the counts defensible. Event, detection, alert and incident are not synonyms, and if they are undefined every number is arguable. |
| Risk level with written justification | An indicator without reasoning is decoration. The justification is what survives being challenged. |
| Cumulative unresolved | The one number that cannot be improved by having a quiet month. |
| Notable changes | New detections and new exclusions. Exclusions are a suppression-risk register in disguise — report them. |
| Notes and proposals | The recipient's action list. The moment this becomes a formality, the report has stopped working. |
Report what you missed
A report that only contains successes teaches the reader that it is marketing. Include what the detection stack failed to catch this month, what the exercise found, and what is still open past its date. Credibility earned in a quiet month is what gets you believed in a bad one.
Next kit
Shift & handover kit
Start-of-shift verification, the handover record that survives an audit, on-call rules, and the escalation contact matrix.