Professional, buyer-facing report outline generated from sample readiness, evidence, findings, and workflow recommendations.
Scope
AI, privacy, security, supply chain, Cloud/API Guard
Readiness score
0/100
Mode
Hosted preview
ISO 42001
Management system standard for responsible development and use of AI, covering AI policy, risk, and lifecycle controls.
EU AI Act
Risk-based regulation for AI systems placed on the EU market, with obligations for high-risk systems including human oversight and transparency.
GDPR
EU regulation on the protection of personal data and privacy, including lawful basis, retention, and data subject rights.
ISO 27001
International standard for an information security management system (ISMS) and Annex A security controls.
ISO 28000
Management system for security of the supply chain, including supplier risk and resilience controls.
Cloud/API Guard
ZAGOS proprietary control set for cloud and API hygiene: key restriction, credential exposure, IAM risk, and AI usage/billing anomaly detection.
Unrestricted API key detected (frontend-exposed)
Restrict the key to specific APIs and HTTP referrers, then rotate it.
AI billing spike anomaly
Investigate the source of the spend increase and confirm it is authorized.
Missing AI system inventory coverage
Register the missing AI systems in the Governance module and re-import.
Missing human oversight evidence
Document human-in-the-loop procedures and collect owner attestations.
Missing / expired data retention policy
Refresh and re-approve the data retention policy; configure automated deletion.
Missing evidence
27
Weak evidence
7
Expired evidence
1
| Control | Framework | Status | Evidence gaps |
|---|---|---|---|
| A.6.2.2 - AI system inventory | iso-42001 | partial | 1 missing, 0 weak, 0 expired |
| Art.14 - Human oversight | eu-ai-act | fail | 2 missing, 0 weak, 0 expired |
| Art.13 - Transparency and provision of information | eu-ai-act | fail | 2 missing, 0 weak, 0 expired |
| A.8.3 - AI system impact assessment | iso-42001 | fail | 1 missing, 0 weak, 0 expired |
| Art.5(1)(e) - Storage limitation / data retention | gdpr | fail | 1 missing, 1 weak, 1 expired |
| Art.6 - Lawful basis for processing | gdpr | partial | 1 missing, 0 weak, 0 expired |
| Art.30 - Records of processing activities | gdpr | pass | 0 missing, 0 weak, 0 expired |
| Art.32 - Security of processing | gdpr | fail | 1 missing, 1 weak, 0 expired |
Review AI system classification
Recommended because review ai system classification matches high ai governance remediation.
Request missing evidence
Recommended because request missing evidence matches high ai governance remediation.
Request missing evidence
Recommended because request missing evidence matches medium ai governance remediation.
Review AI system classification
Recommended because review ai system classification matches high ai governance remediation.
Request missing evidence
Recommended because request missing evidence matches high privacy remediation.
AI Inventory export (ZAGOS Governance)
Supports 2 frameworks and 1 controls.
Encryption configuration scan
Supports 2 frameworks and 2 controls.
Data retention policy v3
Supports 1 frameworks and 1 controls.
Records of Processing Activities (RoPA)
Supports 1 frameworks and 2 controls.
IAM policy export
Supports 3 frameworks and 3 controls.
Supplier security questionnaire — Acme Logistics
Supports 1 frameworks and 2 controls.
Report-ready compliance intelligence assembled locally from Console question coverage, evidence support, findings, and framework linkage.
Local dry-run — not live-connected
This report was generated in local dry-run mode. No live connections to external systems were made during generation.
This package is NOT connected to any live Console Intelligence engine, production database, or external service.
Coverage
20%
Minimal
Questions covered
0/692
Evidence items
781
39% with evidence
Connection
Local Dry-Run Mode
Review 77 question(s) for finding linkage; Clarify domain mapping for 50 question(s)
NOT READY (Gaps Present)
Report not ready: MISSING_FINDINGS: 77 question(s) have no linked findings, AMBIGUOUS_DOMAINS: 50 question(s) have ambiguous domain mapping, PARTIAL_COVERAGE: 271 question(s) are only partially covered
Blocked / missing reasons
Missing integration pieces
This is a preview/metadata-only report generated from local Console intelligence data. It is NOT a formal audit opinion and should NOT be treated as production-ready compliance assurance.