Attest · Sample Report

See exactly what a CIS 18 assessment report looks like

This is a real Touchpoint Security Attest deliverable — an 11-page CIS Controls v8.1 assessment, redacted for a fictional client. Every section, chart and finding format is exactly what you'd get, just with the names changed.

153Safeguards assessed across all 18 CIS Controls
IG3Scored against Implementation Group 3
180Days in the sequenced remediation roadmap, gated at day 30/90/180
1Full example finding, scored, evidenced and mapped to ISO 27001 & NIST CSF

What's inside

01
Executive summaryOverall maturity, the percentage at or above target, and what's holding the organization back.
02
Scope and approachWhat was assessed, the method (structured workshops plus evidence review), and the rating scale used.
03
Key findingsPriority findings ranked by risk, each with a CIS reference and a severity rating.
04
Maturity by controlA bar chart scoring all 18 controls against your target maturity level, so gaps are visual, not buried in text.
05
Remediation roadmapA phased 180-day plan with named work streams, go/no-go exit criteria at each gate, and effort estimates.
06
Detailed findingsOne full example: what we asked, what the evidence showed, the score reasoning, strengths, gaps and a numbered recommendation — mapped to ISO 27001 and NIST CSF 2.0.
A–B
AppendicesThe five-level rating scale we use on every safeguard, and an evidence register extract.

Get the sample report

Enter your work email and we'll unlock the download and send you a copy.

By submitting, you agree to receive this report by email. See our privacy policy. Unsubscribe anytime.

Why this is useful before you talk to us

Most compliance vendors describe their reports in a sales call. We'd rather show you one. This sample uses the same CMMI-style five-level rating scale, the same evidence-backed scoring, and the same format for every finding that a real Attest engagement produces — so you know what you're evaluating before any conversation happens.

If what you see here looks like the kind of evidence your auditor, board or cyber insurer is asking for, talk to us about an assessment of your own environment.

Want this for your own environment?

Attest runs the full CIS 18 assessment and keeps your roadmap current, with evidence pulled straight from Pulse and Trace.

Explore Attest