CONFIGSENTRY / EXECUTIVE REPORT EXAMPLE
FortiGate security management summary
Example-FortiGate-A · Managed audit on 15 January 2026, 10:30 UTC
Prepared for an illustrative security manager. Technical configuration evidence is intentionally omitted.
What changed
Overall posture improved from 72% to 78%, but the latest managed audit found a new Critical administrator MFA failure. A previously failing High management-access control now passes. Two other findings remain open. A configuration-change event triggered the new audit; ConfigSentry sent one concise Critical risk alert for the new failure.
These changes come from a comparison of two eligible audits of the same example appliance. A check that was skipped or not evaluated is not called resolved.
Decision priorities
- Address the new Critical exposure: Security Operations owns the administrator MFA finding, due 22 January 2026. Confirm the account is needed and require an approved MFA method.
- Keep existing work moving: the Network Team has acknowledged the policy-logging gap. Track its due date in the finding workflow.
- Review accepted risk: the broad-service policy has a documented acceptance with a 1 February 2026 review date. Acceptance does not turn the underlying check into a pass.
Management interpretation
The 6-point improvement is encouraging, but the new Critical issue changes the immediate priority. Continue checking later managed audits for both remediation progress and newly introduced risk. ConfigSentry supports CIS-aligned configuration review and evidence gathering; this report does not certify compliance.