Audit & Compliance Manual

Reporting

Operational reporting, stakeholder visibility, and the reporting surfaces used to track posture over time.

Audience: Compliance leads and stakeholdersFocus: Reporting operations and visibilityStatus: Public manual

Scope

Meridian reporting should reduce translation work, not create another reporting layer operators have to reconcile later. This guide keeps the operating guidance and omits private implementation detail.

Workstream: WS-21

Generating Reports On Demand

Report Builder

Navigate to Reports → Report Builder (the relevant workflow).

  1. Select a Report Type:
  2. Compliance Readiness Report — Full program health for internal review
  3. Executive Summary — Single-page board summary
  4. Risk Report — Risk register summary
  5. Audit Report — Generated from the audit cycle detail page (see below)

  6. For readiness, executive, and risk reports: select the Program from the dropdown.

  7. Click Generate & Download PDF. The browser downloads a PDF immediately.

Audit Reports

Audit PDFs are generated from the audit cycle, not the Report Builder, because they require an active audit context. Go to Audits → [Audit Name] and click Download PDF on the audit detail page.

Scheduling Automated Delivery

Navigate to Settings → Scheduled Reports (the relevant workflow).

Requires: Meridian.manage permission.

Creating a Schedule

  1. Click New Schedule.
  2. Select a Report Type.
  3. Select a Program (not required for audit reports).
  4. Set the Schedule — choose a preset (Weekly Monday, Monthly 1st, Quarterly) or enter a custom UTC cron expression (e.g. 0 9 1 * *).
  5. Enter Recipients — comma or newline-separated email addresses.
  6. Select Format (PDF or CSV).
  7. Click Create.

Managing Schedules

  • Pause — Temporarily suspend delivery without deleting the schedule. Click the pause icon on the schedule row.
  • Resume — Click the play icon to re-activate a paused schedule.
  • Delete — Permanently removes the schedule. Delivery history is not retained.

Compliance Trend Analysis

Navigate to Dashboard → Multi-Program (the relevant workflow).

The dashboard shows 90-day readiness sparklines for each program. To populate trend data, an admin must trigger Snapshot All Programs from Settings on a regular basis (or configure the scheduler to run it automatically).

Multi-Program Dashboard

Navigate to Dashboard → Multi-Program (the relevant workflow).

Shows: - Total programs and overall average readiness - Aggregate open findings and overdue MAPs across all programs - Per-program cards sorted by readiness (worst first) to surface problems at a glance - 90-day readiness trend sparkline per program

Click any program card to navigate to that program’s full dashboard.

PDF Report Contents

Compliance Readiness Report

Section Description
KPI Strip Readiness %, controls implemented, fresh evidence %, open findings
Framework Coverage Per-framework: requirement count, coverage %, gap count
Control Health Breakdown: implemented / partial / not implemented / N/A
Evidence Freshness Fresh / stale / missing evidence counts
Open Findings & MAPs Count of open findings and overdue action plans

Executive Summary

Designed for board or management presentations. Single-page, no tables. Shows readiness %, key risk indicators, and program identity.

Risk Report

Shows risk count by severity, open vs. closed, treatment plan summary, and the top open risks by title and score.