First Compliance Report¶
SaaS Generate a NIS2 Article 21 or BOD 22-01 report for your stakeholders.
Time: ~3 minutes
Available Reports¶
SentriKat generates two types of report in the Pro plan:
| Report | Standard | Who needs it |
|---|---|---|
| NIS2 Article 21 | EU NIS2 Directive | European essential/important entities |
| BOD 22-01 | US Binding Operational Directive | US federal agencies and contractors |
Both reports are available on Pro plans and above. These reports are evidence of what you did. They do not certify that your organization complies with NIS2 or any other regulation.
The DORA, PCI-DSS v4.0, ISO/IEC 27001:2022 and SOC 2 reports are the Compliance Pack, a paid add-on on Cloud. Pro does not include it on its own. During Early Access every Cloud plan includes it.
Generate a Report¶
- Navigate to Settings → Compliance in the left sidebar
- Find the card of the report:
- NIS2 Compliance Report: maps your vulnerability posture to NIS2 requirements
- Exploited Vulnerabilities Compliance Report (BOD 22-01): tracks remediation of exploited vulnerabilities against their deadlines
- Click a format button on the card
The file downloads.
What's in the Report¶
NIS2 Article 21¶
- Executive Summary: overall compliance score and risk level
- Vulnerability Overview: active exploited matches by severity
- Remediation Status: patched vs. unpatched within required timeframes
- Asset Coverage: percentage of infrastructure covered by agents
- Recommendations: prioritized action items
BOD 22-01¶
- BOD 22-01 score: percentage of exploited vulnerabilities remediated by deadline
- Overdue Items: vulnerabilities past their remediation due date
- Upcoming Deadlines: what's due in the next 7/30 days
- Remediation Timeline: historical patch-to-deadline performance
Export Options¶
| Format | Use case | On which card |
|---|---|---|
| Share with management, attach to emails, print | NIS2 | |
| CSV | Import into spreadsheets for custom analysis | NIS2 and BOD 22-01 |
| JSON | Feed into GRC tools or automation pipelines | NIS2 and BOD 22-01 |
The format buttons are on each report's card.
Scheduling Reports¶
Set up automatic report generation:
- Go to Products > Scheduled Reports
- Click + New Schedule
- Configure:
- Report type
- Frequency (weekly, monthly, quarterly)
- Recipients (email addresses)
- Format (PDF recommended for email)
- Click Save
Reports are sent as email attachments on the configured schedule.