Modern companies are challenged by the need to demonstrate compliance, mitigate
risk and fund security initiatives. Reporting is the pursuit of simple truth. Like
many technical challenges, the underlying complexity can be daunting. This article
addresses a variety of techniques to report risk and compliance statuses, raise
awareness and influence remediation.