<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Board-Level Risk Reporting — API Reference

## Report Generation Commands

```bash
# Generate KRI dashboard
node agent.js --action dashboard --input register.json

# Translate technical risks to business language
node agent.js --action translate --input risk_entry.json

# Generate board report
node agent.js --action report --input register.json --output board_report.json
```

## KRI Thresholds

| KRI | Green | Amber | Red |
|-----|-------|-------|-----|
| MTTD | <4 hours | 4-24 hours | >24 hours |
| MTTR | <24 hours | 24-72 hours | >72 hours |
| Patch compliance | >95% | 80-95% | <80% |
| Open critical risks | 0 | 1-3 | >3 |
| Overdue reviews | <5% | 5-15% | >15% |

## Board Report Templates

| Section | Length | Audience | Content |
|---------|--------|----------|---------|
| Executive Summary | 1 page | Board | Posture + decisions |
| Risk Dashboard | 1-2 pages | Board + Exec | KRIs + trends |
| Threat Landscape | 1 page | CISO + Board | External context |
| Investment Case | 1 page | CFO + Board | Budget + ROI |
