Sheet MER-03 · Audit & Compliance Manual
Reporting, Remediation & Trust
Leadership reports, remediation tickets, program alerts, risk views and the public trust center.
Reports for leadership
The Executive Summary shows readiness, controls, alerts, findings and framework coverage for one program. Those figures are computed when the page loads. The trend line uses saved daily snapshots and is labelled Current, Stale or Unknown so you know how old it is before you present it.
Reports can be generated on demand or on a schedule. Scheduled reports go to named recipients as PDF, CSV or XLSX attachments, and each delivery is recorded. See Scheduled Reports.
Turning findings into tickets
The remediation bridge opens a ticket in Jira, ServiceNow or GitHub from an alert, a finding or a management action plan item. Meridian tracks the ticket’s status and shows it next to the finding. It blocks duplicate tickets for the same item. See Remediation Bridge.
Program alerts and risk
Program alerts form a queue of monitoring events for one program, for control owners and analysts to triage. The risk register records likelihood, impact and owner for each risk. The heat map plots a program’s risks on a 5x5 grid, with inherent and residual views and a list of the top 10 risks.
The public trust center
The trust center is a public page for certifications, security overviews and documents with access controls. It never publishes anything from internal compliance status on its own. Every item on it was added and published by an operator. See Trust Center.