Sample report

See what you get before you pay for it.

This is the format of the report a Calibre assessment delivers. The facility and findings are made up to show the format, because real client reports stay confidential.

What’s in the report

Executive summaryThe overall picture, findings by severity, and the three things to fix first.
Scope and methodThe six areas assessed, the records reviewed, and what was out of scope.
Detailed findingsEach finding with evidence, why it matters, and the product or setting to move to.
Remediation roadmapFixes grouped into no cost, small spend and budget items, with a price range on each.
Compliance mappingFindings mapped to ISO 27001 A.7, SOC 2 CC6.4, PCI DSS Req. 9, HIPAA §164.310 and CMMC PE.
Re-testHow the included 90-day re-test confirms each Critical and High fix.

An assessment of one site starts from $9,500, fixed and agreed in writing before we start. What’s included

Download the sample report

PDF, sent straight to your browser. No sales call unless you ask for one.

By submitting, you agree to our privacy policy.

One finding, as it appears in the report

Every finding is ranked, evidenced and names what to move to. We take no referral fee or commission on anything we recommend.

Sample findingFormat, not a client
F-014Critical

Site badges readable and writable with off-the-shelf hardware

The credentials in use at rely on a technology with no mutual authentication between card and reader. A working duplicate was produced from a badge presented in the lobby, in under two minutes, with a handheld tool that costs a few hundred dollars.

RemediationMigrate to DESFire EV3 or SEOS
Cost bandBudget
StandardISO/IEC 27001 A.7