Cyber Risk Intelligence Summary Report
Introduction
Cyber Risk Intelligence Summary: your cyber risk trends and forecasts in one report
The Cyber Risk Intelligence Summary is an interactive report in X-Analytics that shows how your cyber risk is trending and where it’s headed. Choose a framework and a trend period, and the report agent builds a forecast across residual risk, countermeasures, cyber threat, risk-reducing actions, and supplier risk, ready to share with your team and leadership.
Bob Vescio, Chief Innovation Officer, walks through the Cyber Risk Intelligence Summary, from choosing a framework and trend period to the five sections of the finished report.
Key takeaways
- The Cyber Risk Intelligence Summary was built in response to customer requests for a single cyber risk summary report.
- You generate it in two choices: a framework (CIS 8.1 or NIST CSF 2.0) and a trend comparison, such as month over month or quarter over quarter.
- Five sections cover residual risk, countermeasures, cyber threat, risk-reducing actions, and supplier risk.
- Forecasts project residual risk, control effectiveness, and cyber threat forward based on past trends.
- The risk-reducing actions section shows how your cyber risk declines as projects close out.
What is the Cyber Risk Intelligence Summary?
It’s a report agent in X-Analytics that pulls trends, forecasts, and key insights from your profile into one interactive report. X-Analytics built it based on customer and partner feedback, and it gives security and risk teams one place to see how their cyber risk is moving and what’s reducing it.
How do you generate the report?
You can generate the report in four steps:
- Click Create Report and select the Cyber Risk Intelligence Summary.
- Choose the framework to represent in the report, such as CIS 8.1 or NIST CSF 2.0.
- Choose your trend comparison, such as month over month or quarter over quarter.
- Click Build Report.
What’s in the report?
The report opens with key metrics for your profile, including threat, inherent risk, control effectiveness, and residual risk. Each metric shows how it has moved over your chosen trend period. Five sections follow.
| Section | What it shows | Forecast |
|---|---|---|
| 1. Residual risk | Residual risk trend, loss category breakdown, and the risk grid | Yes |
| 2. Countermeasures | Control effectiveness trend, function scores, and the control effectiveness grid | Yes |
| 3. Cyber threat | Threat trend, the threat grid, industry benchmark, and threat cards | Yes |
| 4. Risk-reducing actions | Your projects, their risk reduction and ROI, and key insights | Yes |
| 5. Supplier risk | Top suppliers by risk, OSINT scores, and supplier news | No |
Section 1: Residual risk
This section shows how your residual risk has trended and adds a forecast based on a moving average of past results. It breaks residual risk out by loss category, such as data breach and interruption, and includes the interactive risk grid, which you can filter by loss category.
Section 2: Countermeasures
This section tracks control effectiveness and forecasts it forward based on the last twelve months. It scores each function (govern, identify, protect, detect, respond, and recover), shows each function’s trend, and shows how much risk reduction opportunity remains in each. In the walkthrough, protect offered the most opportunity to reduce risk, followed by identify. The control effectiveness grid sorts by asset or threat, high to low, or returns to its fixed order.
Section 3: Cyber threat
This section shows how your cyber threat is trending, with a forecast for the months ahead, along with the full threat grid. It compares each threat category to its industry benchmark, using your results from the threat calibration agent, and shows the severity of each threat.
It also shows how much exposure sits in each threat category, by loss category. In the walkthrough, web application attacks carried the most risk, mostly from data breach, with a notable share of misappropriation, including IP theft. Threat cards then list every threat category in order of the risk it carries, with detailed information on each.
Section 4: Risk-reducing actions
This section pulls every project from the Planner, showing each project’s duration, progress, risk reduction, and return on investment. A forecast graph shows how your cyber risk declines as projects close out. In the walkthrough, the profile carried $20.6 million of cyber risk, with the forecast stepping down from November onward as projects were completed.
Key insights call out where attention is needed, such as projects that are well past their start dates and may need cleanup in the Planner.
Section 5: Supplier risk
This section lists your top suppliers in order of risk, with each supplier’s OSINT score and financial exposure. Suppliers without a completed supplier template show an OSINT score only. It also surfaces relevant news from your supplier ecosystem over the last sixty days, which is useful for vendor conversations and for adding new terms at renewal. Supplier data comes from the Supply Chain Analysis Agent.
Frequently asked questions
What is the Cyber Risk Intelligence Summary?
It’s an interactive report in X-Analytics that shows how your cyber risk is trending and where it’s headed, across residual risk, countermeasures, cyber threat, risk-reducing actions, and supplier risk.
Which frameworks does the report support?
You choose the framework when you build the report. Most X-Analytics users choose CIS 8.1 or NIST CSF 2.0.
How are the forecasts calculated?
Each forecast projects forward from past trends in your profile. Residual risk uses a moving average, and control effectiveness uses the last twelve months.
Where does the risk-reducing actions section get its data?
From the projects you’ve built in the Planner, including each project’s duration, progress, risk reduction, and return on investment.
Can I share the report outside X-Analytics?
Yes. Save it to the Vault, then share it with people inside or outside X-Analytics, or download it.
Questions about the report? Reach out to your X-Analytics customer success team at customersuccess@x-analytics.com.
Related
The X-Analytics grids: now interactive and shareable
Sort, filter, and share your Cyber Risk, Control Effectiveness, and Threat grids by link.
Cyber Threat Modification & Calibration: score threats with evidence
Calibrate your threat scores with evidence and compare each threat category to its industry benchmark.
How do you measure supply chain cyber risk in dollars?
Build your supplier library and see the financial exposure of every supplier relationship by loss category.
Vault: save, annotate, and share your artifacts
Store the artifacts you create, add your own notes, and share them with access you control.
© 2026 X-Analytics. All rights reserved.