Workspace · Acme Corp
Assessment Dashboard
Overall maturity score, risk exposure, domain breakdown, and priority actions at a glance.
Dollar estimates based on industry benchmarks and onboarding profile data.
Maturity Position
2.61
/ 5.0 · Level 2 — Basic
0.89 points below target · Industry benchmark for Financial Services is 3.5+
Current: 2.61Target: 3.5+World-class: 5.0
Target
3
Critical Areas
1
Perception Gap
52
Respondents
918
Questions
⚠ Top 3 Issues Requiring Attention
Problem Management
$1.4M
Score 1.93 — lowest in assessment
Same incidents recurring every quarter. No permanent fix owner. 30% of senior engineering time consumed by avoidable work.
View Risk Register →
Event Management
$1.2M
Customers detecting outages before IT
Monitoring gaps mean customers experience degradation before any alert fires. Every unmonitored service is a customer experience risk.
View Risk Register →
Resilience & Capacity
$2.8M
DR plan untested — RTO/RPO unknown
Capacity planning is reactive. No proactive modelling. Disaster recovery not documented or tested — actual recovery time is unknown.
View Risk Register →
Domain Maturity Scores
Risk Exposure by Category
Top Priority Actions
Perception Gap — VP vs Individual Contributor
Assessment Integrity
Statistical confidence and data quality indicators for this assessment
● High Confidence
Assessment Period
Apr – May 2025
28-day window
Participation
52 / 68
76%
● Above benchmark (55%)
Data Points
54,340
1,045 questions × 52 respondents
Domain Coverage
15 / 15
All domains ≥ 3 respondents
● No thin domains flagged
Response Quality
Good
Avg 24 min per respondent
● No anomalous responses
AI Intelligence · Acme Corp
Ask OpsAlign
Ask anything about your assessment data. Get answers grounded in your actual scores, findings, and risk exposure — not generic IT advice.
Which 3 improvements give the most risk reduction per dollar?
We have a SOC 2 audit in 60 days. What do we fix first?
Write 3 talking points for our CFO about Change Management risk
What's driving our perception gap in Incident Management?
If we lose our senior Change Manager, what happens to our risk profile?
Answers are grounded in Acme Corp's assessment data. Always verify critical decisions with your team.
Executive Reports · Domain Intelligence
Domain Reports
One report per domain — executive summary, findings, risk quantification, and prioritised recommendations. Select a domain to generate.
2
Critical Domains
3
High Risk Domains
6
Elevated Domains
4
Normal Domains
Executive Reports · Acme Corp
Leadership Reports
Thirteen report formats — one for every risk category and every C-suite persona. Each generated from your assessment data, written in the language of its audience.
View:
Risk-Based Reports — 9 Formats Across 9 Risk Categories
Revenue Risk Brief
Revenue and growth exposure framed for commercial leadership. Change-attributed incidents, undetected outages, SLA penalties, and the dollar cost of IT ops gaps on the top line.
Operational Cost Brief
OpEx exposure from manual toil, recurring incidents, and operational inefficiency. Cost of inaction vs. investment case. Written for a finance audience.
CFO Risk Brief
Revenue and OpEx risk combined into one dollar-framed document. Cost of inaction, investment case, and ROI of the top 3 improvements. Written in CFO language.
CX Risk Report
How IT ops failures translate into customer experience degradation. Customer detection vs. IT detection timelines, SLA breach impact, and the invisible damage to trust.
Security Brief
Security posture, compliance gaps across 8 frameworks, audit readiness, and prioritised remediation. Written for a security leadership audience.
Resilience & Continuity Brief
Capacity planning gaps, DR readiness, release risk, and infrastructure exposure. The report for leaders responsible for keeping the lights on.
Workforce Risk Brief
People risk, burnout exposure, succession gaps, and knowledge concentration. The operational evidence HR needs to act — not as a culture issue, but a structural one.
Data & AI Risk Brief
Data governance gaps, AI risk exposure, data sovereignty posture, and AI regulatory compliance. Written for the CDO and data leadership audience.
Brand Exposure Report
External visibility risk, incident communication maturity, probability of customer-visible failure, and estimated brand recovery cost. The report that gets the CEO's attention.
Legal & Regulatory Brief
Compliance gap analysis, regulatory exposure, audit readiness, and the documented liability risk of current operational gaps. Written for legal and compliance leadership.
Leadership Reports — Strategic Overview
Board Presentation
The boardroom weapon. Risk in dollars, maturity overview, compliance readiness, and investment ask. 12 slides. Minimal. Executive. Tier 3 design language.
CIO Full Assessment
The master document. All 15 domains, sub-process scoring, root cause analysis, perception gaps, compliance mapping, AI readiness, people risk, and the complete prioritised roadmap.
Full Assessment Report
Complete long-form narrative. All 15 domains, all findings, all recommendations. The definitive written record of the assessment. 40–60 pages.
Risk Exposure Summary
All 8 risk categories in one view. Total exposure across Revenue, OpEx, CX, Security, Resilience, Employee, Brand, and Legal. The number that stops a Board in its tracks.
Gap Analysis · Current vs Target
Gap Assessment
Three views: current vs. target state across all 15 domains, perception gap between leadership and teams, and the aspiration gap in numbers.
Panel 1 of 3
Current State vs. Target State
Each domain shows where your organization is today (current score) against where respondents indicated they want to be (target state). The gap between them is your improvement mandate.
◆ Maturity Radar — All 15 Domains
Current
Target
Perception (VP)
Voice of the Customer
IT Internal NPS
How the business experiences IT — scored by the people who depend on it every day. Results drawn from the IT Internal NPS survey across all respondent levels.
📊
Loading survey results…
Panel 2 of 3
The Perception Gap
Where leadership believes things are vs. where teams on the ground experience them. Gaps ≥ 0.8 are flagged — they represent misaligned investment, unacknowledged risk, and eroded team trust.
Incident Management — Flagged Gap: +0.94
VP/Director respondents scored Incident Management at 3.62 while Individual Contributors assessed the same domain at 2.68. A gap of this magnitude typically means leadership is evaluating the existence of a process while ICs are experiencing its daily failure. The consequence: underinvestment in the domain where teams are most burned out.
Panel 3 of 3
The Aspiration Gap in Numbers
How far is this organization from where it wants to be — and what does closing that gap actually mean in practice?
Planning · Gap Closure
Roadmap
A phased improvement roadmap across all domains with priorities, actions, and investment estimates. Quick Wins build momentum. Structured Programs address root causes. Strategic Initiatives deliver transformational shift.
18-Month Transformation Timeline
Acme Corp · IT Operations Maturity: L2.6 → L3.75
Domain
⚡ Phase 1 — Quick Wins
Months 0–3 · High impact, low effort
🔧 Phase 2 — Structured Programs
Months 3–9 · Process & tooling
🚀 Phase 3 — Strategic Initiatives
Months 9–18 · Transformation
Investment Planning
Estimated Cost to Close the Gap
Rough-order-of-magnitude estimates for each phase. In-house assumes existing staff reallocation. Hired assumes contractor or consulting engagement. Actual costs vary by org size, tooling, and scope.
Analysis · Risk Intelligence
Risk Register
Nine categories of business risk identified from your assessment. Click any category to see the specific risks, what's causing them, and how to close the exposure.
Total Estimated Risk Exposure
$8.4M – $17.4M
Across 8 business risk categories · Based on Acme Corp assessment scores · Industry benchmark modelling
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
2.61
Overall Maturity
Target: 3.5
Action Engine · Acme Corp
Improvement Planner
Disposition each improvement — Accept the Risk, handle In-House, or commission a SOW. The risk register captures all accepted risks in board-ready format.
Available Improvements · Sorted by Risk Reduction per Dollar
⊘ Accept Risk
🔧 In-House
📝 SOW
Selected Plan Summary
0
Items Selected
$0
Risk Closed
$0
Est. Investment
—
Timeline
ROI Summary
Select improvements to see your return on investment.
Estimated based on industry benchmarks and onboarding profile data.
Generate Outputs
How it works
Select the improvements you want to prioritise. Items are sorted by risk reduction per dollar — highest ROI first.
The SOW is the formal project document. The Sales Deck is for internal budget approval — designed to be presented to your leadership team.
Analysis · Scored Assessment
Heat Map & Scores
Sub-process and question-level scoring across all 15 domains. Colour intensity reflects average response: red = L1, green = L5. Click any row to see question-level detail.
Score:
L1
L2
L3
L4
L5
Click any row to expand question detail
Scores represent average respondent ratings per sub-process and question dimension. N=52 respondents.
Analysis · Root Cause
Why Analysis
Not just what's broken — why it's broken, why it matters, and the business risk if left unresolved. Domains scoring 3.0 or above are operating within acceptable parameters and are not shown. Click any finding to expand.
Planning · Goal Setting
Goals & Planning
Two planning modes: model maturity improvements across all 15 domains and lock in your targets, or project the cost of inaction over an 18-month horizon.
Target Lock
Not locked
Adjust the sliders above to model your improvement scenario, then lock in your targets. Locked targets become the official project improvement trajectory.
◆ Score Impact
Current Score
Baseline
2.61
Simulated Score
After changes
2.61
Improvement
Delta
+0.00
no change yet
Domains Changed
Modified
0
None yet
▲ Risk Exposure Delta
Teal = baseline · Green = simulated
■ Compliance Delta
Analysis Views · Process Intelligence
Process Flow Intelligence
End-to-end process diagrams for each domain, colour-coded by maturity health. Nodes reflect actual assessment scores — teal is healthy, amber is weak, red is broken, grey is missing. Click any node to see the score and finding.
SELECT DOMAIN
Select a domain above
Process health analysis driven by assessment data
Healthy 3.5+
Weak 2.5–3.4
Broken <2.5
Missing
🔄
Select a domain to view its process flow
Each node is colour-coded by the assessment score for that process step
Analysis Views · Operational Intelligence
IT Operations Guide
AI-generated narrative guide per domain. Written for executives and senior stakeholders — plain language, honest about gaps, grounded in the assessment data. Generate on demand, export as PDF.
SELECT DOMAIN
📖
Select a domain to generate its Ops Guide
Each guide is written by AI drawing on the assessment scores, question-level data, and risk profile — producing an executive-readable narrative of how the domain operates and what needs to change.
Analysis · Compliance Intelligence
Compliance Readiness Overlay
OpsAlign maturity scores mapped against 8 major compliance frameworks. Each domain score reflects whether the controls required by each framework are likely met, partially met, or at risk. This is a directional readiness signal — not a formal audit.
SELECT FRAMEWORK
READINESS SCORE
21.9%
controls likely met · 71.9% partial · 6.3% gap
Met
Partial
Gap
GAPS IDENTIFIED
FRAMEWORK DETAILS
ISO27001
ISO/IEC 27001:2022
Information Security Management System
PRIMARY AUDIENCE
CISO / InfoSec
AUDIT FOCUS AREAS
Access controls, incident response, change management, asset inventory
⚠
Critical Gaps — Highest-Weight, Lowest-Score Domains
FULL PICTURE
All Frameworks at a Glance
Readiness across all 8 frameworks side by side, with weighted scores derived from domain maturity and framework-specific relevance.
| FRAMEWORK | CATEGORY | READINESS BREAKDOWN | MET | STATUS | AUDIENCE |
|---|
Analysis · Workforce Intelligence
People & KPI
Respondent profiles, burnout risk, knowledge concentration, and the KPI framework for IT operations performance tracking.
High
Burnout Risk
Problem & Incident teams
3
Knowledge SPOFs
Single points of failure
52
Respondents
VP to operator level
68%
Response Rate
Above benchmark (55%)
Respondent Distribution by Level
Knowledge Risk by Domain
KPI Framework · Recommended Metrics by Domain
Reports · Custom Output
Report Generator
Configure a custom report — choose persona, domains, and format. Generate as PDF, PPTX, or online preview.
1 · Choose Persona
2 · Select Domains
3 · Output Format
Report Preview
📄
Configure your report on the left
Select persona, domains, and format to see a preview
Leadership Report · Board
Board Presentation
The boardroom weapon. Risk in dollars, compliance readiness, investment ask. 12-slide PPTX in Tier 3 executive design.
2.61
Overall Score
Level 2 — Basic
$8.4M–$17.4M
Total Risk Exposure
Across 8 categories
12
Slides
Minimal · Executive
3
SOC 2 Controls at Risk
CC6.8 · CC7.3 · CC9.2
What This Report Contains
· Risk exposure in dollar terms
· Domain maturity overview
· Perception gap analysis
· Compliance readiness summary
· Priority roadmap with ROI
· Investment case vs cost of inaction
· Three critical findings
· Board recommendation & ask
The Headline Finding
"The organisation is accepting an estimated $8.4M–$17.4M in annual IT operations risk that could be reduced to under $4M for an investment of $285K–$530K. The payback period is under four months."
Estimated based on industry benchmarks and onboarding profile data.
Leadership Report · Risk Summary
Risk Exposure Summary
All 8 risk categories in one view. The reverse-risk document that frames every finding as a business consequence.
$8.4M–$17.4M
Total Estimated Exposure
Annual · all categories
3
Critical Categories
Revenue · Resilience · CX
5
Elevated Categories
OpEx · Security · Legal · Employee · Brand
What This Report Contains
· Total exposure across all 8 categories
· Revenue and resilience breakdown
· CX and customer trust risk
· Security and compliance exposure
· Employee experience and burnout risk
· Brand and reputation exposure
· Legal and regulatory liability
· Priority risk reduction roadmap
The Headline Finding
"$8.4M to $17.4M. That is the range of annual business risk this organisation is currently accepting from IT operations gaps. Three of those eight risk categories are rated Critical — meaning the exposure is active, not theoretical."
Estimated based on industry benchmarks and onboarding profile data.
Leadership Report · Full Assessment
Full Assessment Report
The definitive written record. All 15 domains, all findings, all recommendations. The complete narrative in one document.
13
Domains Assessed
Full IT ops coverage
918
Questions
5 dimensions per domain
40–60
Pages
Complete narrative
52
Respondents
VP to operator level
What This Report Contains
· All 15 domain scores with sub-process breakdown
· Root cause analysis for every finding
· Perception gap analysis by domain
· Compliance framework mapping
· Full prioritised roadmap with costs
· Workforce intelligence summary
· Voice of customer findings
· Investment case and next steps
The Headline Finding
"This report represents the complete diagnostic picture of Acme Corp's IT operations maturity. It is the document the CIO and their leadership team should use as the primary reference for every investment and prioritisation decision made in the next 12 months."
Estimated based on industry benchmarks and onboarding profile data.
Risk Report · CFO
CFO Risk Brief
Revenue and operational cost risk combined into one dollar-framed document. The investment case and cost of inaction. Written for CFO and Finance Leadership.
$8.4M–$17.4M
Total Risk Exposure
Across all 8 risk categories
$285K–$530K
Estimated Investment to Fix Top 3
Highest ROI improvement items
18–30×
Return on Investment
Risk closed vs. investment required
What This Report Contains
• Total risk exposure across all 8 categories
• Revenue risk: incident cost and frequency
• OpEx risk: manual toil and recurring costs
• Cost of inaction over 12 and 24 months
• Revenue risk: incident cost and frequency
• OpEx risk: manual toil and recurring costs
• Cost of inaction over 12 and 24 months
• Investment required for top 3 improvements
• ROI model with payback period
• Comparison to equivalent consulting cost
• Prioritised investment recommendation
• ROI model with payback period
• Comparison to equivalent consulting cost
• Prioritised investment recommendation
Cost of Inaction
Year 1 (do nothing)
$8.4M+
Year 2 (compounding risk)
$11.2M+
Attrition of key staff
$400K–$900K
SOC 2 audit failure
$500K–$2M
Investment Case
Top 3 improvements
$285K–$530K
Risk closed
$4.3M / yr
Payback period
3–4 months
5-year NPV
$18M+
The Headline Finding
"The organisation is spending an estimated $8.4M–$17.4M annually accepting IT operational risk it could close for $285K–$530K. The investment pays back in under four months. The question is not whether to invest — it is how quickly the board is prepared to act."
Acme Corp · CFO Risk Brief · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Security
Security & Compliance Brief
Security posture, compliance gaps, and audit readiness. Written for CISO, Security Team, and Board.
2
SOC 2 Controls at Risk
CC6.8 Change · CC7.3 Incident
2.37
Config & Asset Score
CMDB gaps · security visibility
8
Frameworks Assessed
SOC 2 · ISO 27001 · NIST · ITIL · CIS
What This Report Contains
• Security posture score across all domains
• SOC 2 control gap analysis (Type I & II)
• ISO 27001 Annex A mapping
• NIST CSF readiness by function
• SOC 2 control gap analysis (Type I & II)
• ISO 27001 Annex A mapping
• NIST CSF readiness by function
• CMDB and asset governance gaps
• Change control audit trail exposure
• Prioritised remediation for audit prep
• Evidence collection requirements
• Change control audit trail exposure
• Prioritised remediation for audit prep
• Evidence collection requirements
42%
SOC 2 Ready
38%
ISO 27001
51%
NIST CSF
67%
ITIL 4
45%
CIS Controls
The Headline Finding
"Undocumented production changes and inconsistent incident records place SOC 2 CC6.8 and CC7.3 controls at material risk. A Type II audit conducted today carries a significant probability of a qualified opinion. The organisation has 60–90 days to remediate before the window closes."
Acme Corp · Security Brief · May 2025
Risk Report · Employee Experience
Workforce Risk Brief
People risk, burnout exposure, and succession gaps. The operational evidence HR needs — not a culture issue, a structural one. Written for CHRO, HR Leadership, and COO.
High
Burnout Risk Level
Problem & Incident Mgmt teams
1.93
Knowledge Mgmt Score
Critical knowledge undocumented
40–60%
MTTR Impact if Key Person Leaves
Single points of knowledge failure
What This Report Contains
• Burnout risk indicators by domain and team
• After-hours escalation frequency data
• Knowledge concentration risk mapping
• Single points of failure identification
• After-hours escalation frequency data
• Knowledge concentration risk mapping
• Single points of failure identification
• Succession gap analysis for key roles
• Training and upskilling gap assessment
• Cost of attrition in operational context
• Workforce risk reduction roadmap
• Training and upskilling gap assessment
• Cost of attrition in operational context
• Workforce risk reduction roadmap
Critical Risk Indicators
● Problem Mgmt team: after-hours escalation 3× industry average
● Knowledge Mgmt score 1.93 — second lowest domain
● 2–3 individuals carry critical incident knowledge
● No documented succession plan for key SRE roles
● Knowledge Mgmt score 1.93 — second lowest domain
● 2–3 individuals carry critical incident knowledge
● No documented succession plan for key SRE roles
What HR Can Do With This
● Present burnout evidence to leadership as structural, not cultural
● Justify headcount for Problem Management function
● Build knowledge capture into performance goals
● Create succession plan with operational data as evidence
● Justify headcount for Problem Management function
● Build knowledge capture into performance goals
● Create succession plan with operational data as evidence
The Headline Finding
"HR is seeing attrition signals in the teams that matter most operationally. The data shows this is not a culture problem — it is a structural overload problem. The same two or three people are being pulled into every major incident. When they leave, the organisation will not know it has a crisis until the next P1."
Acme Corp · Workforce Risk Brief · May 2025
Leadership Report · CIO
CIO Full Assessment
The master document. All 15 domains, sub-process scoring, root cause, perception gaps, compliance mapping, AI readiness, people risk, and the complete prioritised roadmap.
2.61
Overall Score
Target 3.5 · Gap 0.89
4
Critical Domains
Score below 2.5
+0.94
Perception Gap
IM: VP vs IC · Exceeds threshold
918
Data Points
52 respondents · 15 domains
What This Report Contains
· All 15 domain scores + sub-process breakdown
· 5-dimension scoring (People/Process/Tech/Data/Gov)
· Perception gap analysis — full detail
· Compliance mapping across 8 frameworks
· AI/automation readiness score
· Knowledge concentration risk map
· Full prioritised roadmap with effort/cost
· What-if improvement scenarios
The Headline Finding
"For nine years this organisation has run IT operations on instinct and experience. This assessment gives the CIO the data to run it on evidence — and the language to communicate that evidence to every stakeholder who needs to act on it."
Estimated based on industry benchmarks and onboarding profile data.
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Revenue
Revenue Risk Brief
IT operations gaps translated into revenue and growth exposure. Written for CRO, CEO, and CFO.
$2.1M–$4.2M
Estimated Annual Revenue Exposure
Change-attributed incidents + undetected outages
34%
Incidents Customer-Detected First
Customers know before IT does
3 of 5
P1s Were Change-Attributed
Last quarter · $180K–$400K each
What This Report Contains
• Revenue exposure by incident type and frequency
• Change-attributed incident cost modelling
• Undetected outage revenue impact
• SLA breach penalty exposure
• Change-attributed incident cost modelling
• Undetected outage revenue impact
• SLA breach penalty exposure
• Customer detection timeline analysis
• Revenue risk reduction roadmap
• ROI of top 3 improvements on revenue
• 12-month revenue protection scenario
• Revenue risk reduction roadmap
• ROI of top 3 improvements on revenue
• 12-month revenue protection scenario
The Headline Finding
"Customers are detecting outages before the operations team in an estimated 34% of incidents. At current incident frequency, this represents $2.1M–$4.2M in annual revenue risk."
Acme Corp · Revenue Risk Brief · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · OpEx
Operational Cost Brief
Operational inefficiency and avoidable cost exposure. Written for CFO, COO, and CIO.
$800K–$1.6M
Annual OpEx Risk
Avoidable recurring costs
30%
Senior Engineer Time
Consumed by recurring incidents
1.93
Problem Mgmt Score
Lowest domain · No fix ownership
What This Report Contains
• Recurring incident cost modelling
• Manual toil cost by process area
• Senior resource time leakage analysis
• Knowledge management cost of gaps
• Manual toil cost by process area
• Senior resource time leakage analysis
• Knowledge management cost of gaps
• Automation opportunity assessment
• Cost of inaction over 12/24 months
• Investment case and payback period
• OpEx reduction roadmap
• Cost of inaction over 12/24 months
• Investment case and payback period
• OpEx reduction roadmap
The Headline Finding
"Estimated 30% of senior engineering time is consumed by recurring incidents that a functioning Problem Management capability would prevent. That is approximately $500K–$900K in annual avoidable cost."
Acme Corp · Operational Cost Brief · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Customer Experience
CX Risk Report
How IT operations failures translate into customer experience degradation. Written for CCO, CRO, and COO.
$1.2M–$2.4M
Annual CX Risk Exposure
NPS impact · churn · support cost
2.44
Event Management Score
Primary driver of CX exposure
2.76
SLA & Governance Score
Inconsistent SLA across teams
What This Report Contains
• Customer detection vs IT detection timeline
• Service visibility gap map by platform
• SLA breach frequency and customer impact
• Incident communication quality score
• Service visibility gap map by platform
• SLA breach frequency and customer impact
• Incident communication quality score
• Voice of Customer gap analysis
• CX perception gap (IT belief vs reality)
• NPS impact modelling
• CX risk reduction roadmap
• CX perception gap (IT belief vs reality)
• NPS impact modelling
• CX risk reduction roadmap
The Headline Finding
"In Financial Services, trust is the product. Customers are currently experiencing IT degradation that the operations team cannot see. Every undetected customer-facing event is a trust withdrawal with no corresponding deposit."
Acme Corp · CX Risk Report · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Resilience
Resilience & Continuity Brief
Capacity, continuity, and infrastructure risk. Written for CTO, CIO, and COO.
$2.8M–$5.6M
Annual Resilience Risk
Capacity + DR + release failure
2.24
Resilience & Capacity Score
Critical · DR untested
2.12
Release Management Score
Failed deployments · no gate
What This Report Contains
• Capacity planning gap analysis
• DR plan status and test history
• Actual vs documented RTO/RPO
• Release failure rate and root cause
• DR plan status and test history
• Actual vs documented RTO/RPO
• Release failure rate and root cause
• Infrastructure visibility coverage
• Single points of failure mapping
• Resilience improvement roadmap
• Business continuity risk score
• Single points of failure mapping
• Resilience improvement roadmap
• Business continuity risk score
The Headline Finding
"The Disaster Recovery plan has not been tested. The actual Recovery Time Objective and Recovery Point Objective are unknown. In Financial Services, this is an unacceptable and unquantified operational risk."
Acme Corp · Resilience & Continuity Brief · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Brand & Reputation
Brand Exposure Report
External visibility risk and incident communication maturity. Written for CEO, CMO, and Board.
68%
Probability of Customer-Visible P1
Next 90 days · based on current gaps
−12 pts
Avg NPS Impact
Per major public IT failure · FS sector
6–9 mo
NPS Recovery Time
Post major public IT failure · FS benchmark
What This Report Contains
• External visibility risk score by service
• Incident communication maturity assessment
• Customer-visible event probability model
• Social and media exposure analysis
• Incident communication maturity assessment
• Customer-visible event probability model
• Social and media exposure analysis
• Industry benchmark comparison
• Brand recovery cost modelling
• Proactive communication capability score
• Brand risk reduction roadmap
• Brand recovery cost modelling
• Proactive communication capability score
• Brand risk reduction roadmap
The Headline Finding
"Based on current monitoring gaps and incident communication maturity, there is an estimated 68% probability of a customer-visible P1 event in the next 90 days. The organisation does not currently have the capability to get ahead of the narrative before customers amplify it."
Acme Corp · Brand Exposure Report · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Risk Report · Legal & Compliance
Legal & Regulatory Brief
Compliance exposure, regulatory risk, and documented liability gaps. Written for General Counsel, CISO, and Board.
$500K–$2M+
Legal & Compliance Exposure
Audit failure + regulatory fine risk
2
SOC 2 Controls at Risk
CC6.8 Change · CC7.3 Incident
2.37
Config & Asset Score
Data governance gaps · GDPR risk
What This Report Contains
• Compliance gap analysis — 8 frameworks
• Specific control failures mapped
• Regulatory exposure by jurisdiction
• Audit readiness score and timeline
• Specific control failures mapped
• Regulatory exposure by jurisdiction
• Audit readiness score and timeline
• Data governance gap assessment
• Liability risk of current gaps
• Remediation priority for audit prep
• Evidence collection requirements
• Liability risk of current gaps
• Remediation priority for audit prep
• Evidence collection requirements
The Headline Finding
"SOC 2 CC6.8 and CC7.3 controls are at material risk based on current Change and Incident Management maturity scores. A Type II audit scheduled without remediation carries a significant probability of qualified opinion or finding."
Acme Corp · Legal & Regulatory Brief · May 2025
Estimated based on industry benchmarks and onboarding profile data. Actual figures require full financial intake.
Workforce Intelligence · Acme Corp
Workforce Context
The interpretive lens for every score in this assessment. Team composition, work arrangement, time zone spread, tenure distribution, and organisational disruption — rolled up at every level.
Organisation-Wide Workforce Profile · Acme Corp · 340 People
12
Time Zones
34%
MSP / Third-Party
39%
Non-English Primary
31%
<12mo Tenure
18%
4yr+ (Knowledge Risk)
Work Arrangement Mix · Org-Wide
Tenure Distribution · Knowledge Risk
⚠ Knowledge Cliff Detected
60% of institutional expertise (4yr+ tenure) represents only 18% of headcount. If 2–3 senior staff leave, MTTR on core systems increases an estimated 55–70%.
Global Team Distribution · Time Zone Spread
Each column represents one hour offset. Darker = more team members in that time zone band. The golden hour — when all time zones overlap — is 10:00–11:00 UTC.
How Workforce Context Affects Score Interpretation
The following domains show scores that should be interpreted in light of structural context factors — not as pure capability measurements.
Respondent Profile & Knowledge Risk
High
Burnout Risk
Problem & Incident teams
3
Knowledge SPOFs
Single points of failure
52
Respondents
VP to operator level
68%
Response Rate
Above benchmark (55%)
Respondent Distribution by Level
Knowledge Risk by Domain
Action Engine · Committed Plan
Your Improvement Plan
Your dispositions translated into a committed timeline. Adjust resource allocation to see how SOW vs in-house choices affect speed, cost, and risk closure.
🚀
No plan dispositioned yet
Go to the Improvement Planner and disposition each item as Accept Risk, In-House, or SOW. Your committed plan will appear here.
Workforce Intelligence · AI-Powered
Contextual Coaching
AI-generated coaching plans that account for team structure, not just performance scores. Select a manager to generate a bespoke plan grounded in their team's actual context.
Manager Context Profiles · Complexity Index
Select Manager
How this works: OpsAlign reads the manager's team context profile — composition, tenure, time zones, recent disruption — alongside their domain scores, and generates a bespoke coaching plan using AI. The plan explains structural context before making any performance assessment.
🧠
Select a manager to generate their coaching plan
The AI reads their full context profile before generating any assessment or recommendation.
Analysis Views · SLA & KPI Framework
SLA & KPI Generator
Domain-specific SLA frameworks calibrated to actual maturity level and team context. Each SLA paired with the KPIs needed to measure it. Current, transition, and aspirational tiers.
Recommended KPI Framework — All Domains
The following KPIs are recommended across all 15 domains based on your maturity scores. These metrics feed directly into Performance Goals.
Workforce Intelligence · Goal Framework
Performance Goals
Cascading maturity improvement goals from CIO to manager level. Context-adjusted targets based on team composition.
Settings
Assessment Configuration
Manage respondents, domain scope, and assessment parameters.
● ACTIVE
Workspace Access
Control who can view this workspace and at what permission level.
Respondent Management
Survey participation status. Use per-row actions to resend invitations to individuals.
Assessment Window
Start date
Jun 1, 2025
Set at launch · read-only
Close date
Domain Scope
Domains included in this assessment cycle. Scope changes are permitted while the assessment is ACTIVE and locked once closed.
AI
AI & ML Operations
CA
Capacity Management
CI
CI/CD & Automation
CM
Change Management
DT
Data Governance & Quality
EV
Event & Monitoring Mgmt
IM
Incident Management
KM
Knowledge Management
PM
Problem Management
RC
Release & Deployment Mgmt
RM
Risk Management
SL
Service Level Management
SR
Service Request Management
VM
Vulnerability Management
EP
Enterprise Platform & Infrastructure Management
All 15 domains are active in this assessment cycle.
⊕ Expand / Change ScopeSettings
Account & Billing
Licence status, payment history, and account management.
● ACTIVE
Licence Summary
Plan
Annual Licence
Licence holder
ITOMAC Inc.
Status
● ACTIVE
Renewal date
Jun 1, 2026
Payment path
STRIPE
Assessment cycles
1 of 2 used this year
Entitlements
✓ 2 assessment cycles per year
✓ All 15 domains per cycle
✓ Unlimited respondents per cycle
✓ Full report suite
✓ Workspace user management
Payment History
Billing Contact
Danger Zone