> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/risk-management/posture/risk-and-roi-report.md).

# Risk and ROI report

The Risk and ROI (return on investment) is an executive report based on end-user activity events and asset metadata across all your SaaS applications. The report allows you to focus on the main vulnerabilities and security risks in your organization.

{% hint style="info" %}

* As a prerequisite to generating a Risk and ROI report, you need to integrate DoControl with [Google Workspace](/docontrol-user-guide/integrations/integrations-google-drive.md) or [Slack](/docontrol-user-guide/integrations/slack.md).
* DoControl's Risk and ROI report is based on data from a selected time range within the last year.
  {% endhint %}

#### How do I generate a Risk and ROI report?

1. In DoControl, navigate to **Posture > High-level SaaS** (beta).\
   Note that high-level SaaS posture is being released gradually.

2. Click the **Generate ROI** button on the right.

3. Select the time range to be covered by the report:

   * Last 30 days
   * Last 60 days
   * Last 90 days
   * Last 180 days
   * Last 365 days
   * Custom range

4. For the custom date range, select any time period within the last 365 days.<br>

   <div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FnPZ9BZAOcCB2XRwuZBJR%2Fcustom%20range%20ROI.png?alt=media&amp;token=5bb6fc32-7905-4642-87a3-d4e8a4c69033" alt="" width="452"><figcaption></figcaption></figure></div>

The Risk and ROI report opens in a new tab as a downloadable PDF.

<div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FBtvHIlkN0EJjV7qwWJi0%2FRisk%20and%20ROI%20report%20page%201.png?alt=media&amp;token=11679f39-0584-489f-b3b0-43dc3f3cf516" alt="" width="533"><figcaption></figcaption></figure></div>

## Highlights

The Risk and ROI report highlights the main actions DoControl performed to minimize data loss and prevent data exfiltration.

<table><thead><tr><th width="312">Risk and ROI report parameter</th><th>Description</th></tr></thead><tbody><tr><td>Date</td><td>The time period covered by this report</td></tr><tr><td>Remediations</td><td>Number of successful remediation actions that were applied to your organization's assets in the report period</td></tr><tr><td>Workflow executions</td><td>Number of workflow executions that were run across your SaaS apps in the report period</td></tr><tr><td>DLP scans</td><td>Number of regex and PII scans that ran on text-based assets in the report period</td></tr><tr><td>End-user interactions</td><td>Number of approval or decision steps in workflows that  users responded to</td></tr><tr><td>Covered risky events</td><td>Number of risky events covered by DoControl workflows out of the total number of risky events</td></tr><tr><td>Event trend</td><td>Increase or decrease in covered risky events compared to the start date of the report</td></tr></tbody></table>

## Key findings

DoControl presents the main risk areas in your organization that currently require attention:

<table><thead><tr><th width="289">Key finding</th><th>Description</th></tr></thead><tbody><tr><td>Potential risky events</td><td>Number of events from the report period that could lead to data exposure or exfiltration</td></tr><tr><td>High-severity active alerts</td><td>Number of currently active alerts with the riskiest severity level</td></tr><tr><td>Assets shared externally</td><td>Number of assets that can be currently accessed by specific external users</td></tr><tr><td>Assets shared with the world</td><td>Number of publicly shared assets that can currently be accessed by anyone with a link</td></tr><tr><td>Risky shadow apps</td><td>Number of shadow apps currently installed in your organization with a risk score of 7-10</td></tr></tbody></table>

## ROI analysis

See how much DoControl enabled you to save for the entire time period of your report.

{% hint style="warning" %}
You need completed workflows with remediation actions in order to view monthly ROI analysis.
{% endhint %}

<table><thead><tr><th width="291">Monthly saving</th><th>Description</th></tr></thead><tbody><tr><td>Cost savings</td><td>Total amount your organization saved for the report period in dollars</td></tr><tr><td>Cost saved on remediation</td><td>Amount your organization saved for the report period in dollars as a result of DoControl remediation</td></tr><tr><td>Hours saved on remediation</td><td>Number of hours your organization saved for the report period as a result of DoControl remediation </td></tr><tr><td>Cost of data breach</td><td>Amount your organization saved in the report period by averting a data breach</td></tr></tbody></table>

## Threat snapshot

See at a glance the main threats your organization currently faces. These threats indicate unauthorized data access or exfiltration from the time your organization integrated with DoControl.

{% hint style="success" %}
The main threats in your organization are highlighted, so clicking them opens the filtered list of threats in DoControl.
{% endhint %}

<div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FMPnv8OSjKYwoTXVcMtaT%2Frisk%20and%20ROI%20report%20page%202.png?alt=media&amp;token=191dd3ea-f339-4cf5-a098-fda10d72a7ad" alt=""><figcaption></figcaption></figure></div>

<table><thead><tr><th width="265">Threat</th><th>Description</th></tr></thead><tbody><tr><td>Encryption key and certificate sharing</td><td>Number of encryption keys and certificates, including PEM, CER and CRT files, that are stored in your organization. <br>Click the encrypted file type to open the filtered <strong>Asset</strong> page with those encryption files.</td></tr><tr><td>External collaborator sharing</td><td>Users outside your organization with access to the highest number of assets inside your organization.<br>Click the external collaborator to open the <strong>External user</strong> page displaying all assets the user has access to.</td></tr><tr><td>Shadow apps</td><td>Number of shadow apps installed in your Google Workspace according to status (abandoned, removed &#x26; reinstalled, and risky apps).<br>Click the number of shadow apps for a specific status to open the filtered <strong>Shadow app</strong> page displaying all shadow apps with that status.</td></tr><tr><td>Private account sharing</td><td>Users with private email accounts (such as gmail or yahoo) having access to the highest number of assets inside your organization.<br>Click the private email account to open the <strong>External user</strong> page displaying all assets the user has access to.</td></tr></tbody></table>

## DoControl recommendations

When your organization leverages DoControl's recommendations, you increase your SaaS data security and boost your ROI.

<div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F0DNE4tspVBoT9BPEBhI3%2FRisk%20and%20ROI%20report%20page%203.png?alt=media&amp;token=8206643d-bee5-4d55-9eb1-aecc94b6ffa8" alt="" width="491"><figcaption></figcaption></figure></div>

* **Access business context** - When you integrate DoControl with an HRIS, such as HiBob or Workday, you can leverage HR metadata in your workflows to immediately remediate risky use cases, such as about-to-leave employees downloading sensitive data.&#x20;
* **Protect your SaaS apps** - Integrating DoControl with more of your organization's SaaS apps gives you increased security coverage for potential data loss and exfiltration.
* **Mitigate public sharing** - Files shared with the whole world are risky since your organization's sensitive data is exposed to the whole world, and can be easily exfiltrated. You can easily reduce the risk by automatically removing publicly shared links.
* **Monitor shadow apps** - Upgrading to DoControl's premium Shadow app module will allow you to automatically remove risky and malicious apps from your organization, preventing potential data exfiltration and even damage.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/risk-management/posture/risk-and-roi-report.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.