Compliance reporting
built in, not bolted on
One-click reports for every major framework. Give your auditors exactly what they need.
Sarbanes-Oxley Act
Internal controls over financial reporting. Phishlens demonstrates security awareness training compliance with documented campaign history, training completion records, and risk trend analysis.
Health Insurance Portability
Required security awareness training for healthcare organizations. Phishlens provides training completion tracking, risk assessments, and incident documentation.
Payment Card Industry
Requirement 12.6: Security awareness training for all personnel. Phishlens tracks training completion, phishing test results, and provides annual compliance reports.
Information Security Management
Annex A.7.2.2: Information security awareness. Phishlens provides training records, campaign metrics, and continuous improvement documentation.
Cybersecurity Framework
PR.AT-1: All users are informed and trained. Phishlens maps directly to NIST awareness and training controls with detailed metrics and trend analysis.
General Data Protection
Article 39: Awareness-raising and training of staff. Phishlens includes GDPR-compliant data handling, consent management, data export, and deletion tools.
What every report includes
Campaign History
Complete log of all simulations — dates, targets, templates, and results.
Training Completion
Per-user training records with module names, completion dates, and scores.
Risk Score Trends
Organization-wide and per-department risk score changes over time.
Incident Documentation
Phishing report submissions, response times, and resolution tracking.
User Participation
Enrollment rates, active participation, and coverage metrics.
Executive Summary
One-page overview designed for leadership and board presentations.
Simplify your next audit
Generate compliance-ready reports in one click. Get started with Phishlens today.