The CS Reporting Management function has the goal to provide clear understanding of the effectiveness and efficiency of all the cyber security related Services, whether they are operated by the CS Department directly, or from other Departments inside or outside the Global IT Services Direction. In addition, through the interactive reports delivered, the Reporting Management function supports the CISO, the CS Managers and all the users of the reports to understand and to monitor the performances of the identified KPIs under their responsibility. 
 

Task:
 

• To clear define all the reporting needs for the CS Department, whether the report is consumed from CS internally or from Customers and/or other stakeholders. Including new-requirements collection from the CS Managers and to contious enhance the reporting service, keeping the total overview of the entire reporting scenario. Proactiveness is essential to aggregate and correlate all the data collected and providing added values to the various stakeholders.
  To define with CISO/Deputy CISO  when to move any traditional report on the visual analytics platform (Power BI).
  With regards to the Visual Analytics platform, to ensure functional requirements are understood and transformed in technical requirements to be addressed by the Dashboard Development team, and coordinate Development team, in term of Dashboard prioritization, planning, UAT, etc.  

• To ensure the preparation and execution of all the CS Reporting Activities and Analysis (Monthly, Quarterly and Annual aggregate reports etc.), ensuring all the data at the basis of each report are quality checked and delivered on time (accordingly with the frequency defined).
   
• To ensure that all CS Processes are defined, documented and maintained (including Service and process description, workflow, work instruction, KPIs, SLAs, DataFlows and the related Templates) in a consistent way in particular with regards to all the interactions outside the CS Dept.
   
• To support the CISO / Deputy CISO to ensure that the expected effectiveness and efficiency of each CS services is achieved, and to define together with the CS Service Managers any corrective action if the target is not achieved.

• To establish, measure and maintain an effective and efficient Lessons Learned process within – but also outside – the CS Department, whenever a major security incident occurs impacting the business, stimulating the continuous improvement approach.