Scheduled Reports

Scheduled reports automate the generation and delivery of recurring reports. Instead of manually generating a report each week or month, configure a schedule and BreachSpider handles the rest.

Available on Professional tier and above.

Why Schedule Reports

• Consistency: Reports are generated on the same day every period, ensuring regular posture reviews.
• Automation: No manual intervention required. The report lands in your inbox on schedule.
• Compliance cadence: NERC CIP requires patch assessments at least every 35 days. A monthly scheduled report ensures you never miss a cycle.
• Management visibility: Executives receive a monthly posture summary without having to ask for it.
• MSSP client deliverables: Automatically generate and deliver monthly vulnerability assessments to each client.

Setting Up a Schedule

1. Navigate to Reports > Schedule.
2. Click New Schedule.
3. Configure the schedule:

Report Type (required): Select from:

• Executive Summary
• Environment Risk Report
• NERC CIP Evidence Package
• IEC 62443 Report

Environments (required): Select one or more environments to include. For Environment Risk and NERC CIP reports (single-environment), select one. For Executive Summary (multi-environment), select all relevant environments.

Frequency (required):

Day (required for weekly and monthly):

• Weekly: select the day of the week.
• Monthly: select the day of the month (1-28, or "Last Day" for end of month).

Time (optional): The time of day to generate the report. Defaults to 06:00 in your account's timezone. Reports generated early morning are ready by the start of business.

Recipients (required): One or more email addresses. The completed report PDF is emailed to these recipients when generation completes. Recipients do not need BreachSpider accounts.

Enabled (default: yes): Toggle the schedule on or off without deleting it.

1. Click Save Schedule.

How It Works

When the schedule fires:

1. BreachSpider generates the report for the configured environment(s) and the current reporting period (previous week, month, or quarter depending on frequency).
2. SAGE generates the narrative sections.
3. The report is saved in the Reports section.
4. The PDF is emailed to all configured recipients.
5. A notification appears in your BreachSpider notification bell.
6. The audit log records REPORT_GENERATED with schedule ID and recipients.

Managing Schedules

Navigate to Reports > Schedule to see all your configured schedules.

Each schedule shows: name, report type, environments, frequency, next run date, recipients, and enabled status.

• Edit: Modify any field on an existing schedule.
• Disable/Enable: Toggle the schedule without deleting it. Useful for pausing reports during holidays or organizational changes.
• Delete: Permanently remove the schedule.
• Run Now: Trigger an immediate generation outside the regular schedule. The report covers the same period as the next scheduled run.

Schedule Examples

Monthly Executive Summary for Leadership

• Type: Executive Summary
• Environments: All environments
• Frequency: Monthly, 1st day
• Recipients: [email protected], [email protected]
• Purpose: Monthly posture review for leadership team.

Weekly Environment Risk for OT Team

• Type: Environment Risk Report
• Environment: Water Treatment Plant Alpha
• Frequency: Weekly, Monday
• Recipients: [email protected]
• Purpose: Weekly finding review for the OT engineering team's Monday meeting.

Quarterly NERC CIP Evidence for Compliance

• Type: NERC CIP Evidence Package
• Environment: Substation Beta
• Frequency: Quarterly
• Recipients: [email protected]
• Purpose: Quarterly compliance evidence generation aligned with CIP audit cycles.

Monthly Client Report (MSSP)

• Type: Environment Risk Report
• Environment: Acme Utility - Water Plant
• Frequency: Monthly, last day
• Recipients: [email protected], [email protected]
• Purpose: Automated monthly deliverable for MSSP client.

Troubleshooting

Report not generated on schedule: Check that the schedule is enabled. Verify the environment still exists (deleted environments cannot generate reports). Check the Reports section for a failed report entry.

Recipients not receiving email: Verify email addresses are correct. Check spam folders. Ensure [email protected] is allowlisted in the recipients' email systems.

Report data seems incomplete: The report covers the reporting period ending on the generation date. If you set a monthly schedule for the 1st, the report covers the previous full month.