# Security Audit Report: {{engagement_name}}

**Type:** {{engagement_type}}
**Period:** {{start_date}} — {{end_date}}
**Status:** {{status}}
**Prepared by:** NERF

---

## 1. Audit Objectives

{{mission}}

---

## 2. Framework Coverage

**Primary Framework:** {{framework}}

| Control Domain | Controls Assessed | Compliant | Non-Compliant | Not Applicable |
|---------------|-------------------|-----------|---------------|----------------|
{{#framework_coverage}}
| {{domain}} | {{assessed}} | {{compliant}} | {{non_compliant}} | {{na}} |
{{/framework_coverage}}

{{^framework_coverage}}
Framework coverage tracking was not recorded for this engagement.
{{/framework_coverage}}

---

## 3. Control Assessment

{{#findings}}
### [{{id}}] {{title}}

| Field | Value |
|-------|-------|
| **Severity** | {{severity}} |
| **Control** | {{control_id}} |
| **Status** | {{status}} |
| **Location** | {{location}} |

**Observation:** {{description}}

**Evidence:** {{proof}}

**Recommendation:** {{remediation}}

---
{{/findings}}

{{^findings}}
No control gaps were identified during this audit.
{{/findings}}

## 4. Gaps Analysis

### Critical Gaps
{{#gaps_critical}}
- {{.}}
{{/gaps_critical}}

### Significant Gaps
{{#gaps_significant}}
- {{.}}
{{/gaps_significant}}

### Minor Gaps
{{#gaps_minor}}
- {{.}}
{{/gaps_minor}}

---

## 5. Recommendations

{{#recommendations}}
| Priority | Area | Recommendation | Effort |
|----------|------|---------------|--------|
| {{priority}} | {{area}} | {{text}} | {{effort}} |
{{/recommendations}}

{{^recommendations}}
Recommendations will be generated based on audit findings.
{{/recommendations}}

---

## 6. Evidence Log

{{#evidence}}
| Date | Control | Evidence Type | Reference |
|------|---------|--------------|-----------|
| {{date}} | {{control}} | {{type}} | {{reference}} |
{{/evidence}}

{{^evidence}}
Evidence tracking was not recorded for this engagement.
{{/evidence}}

---

## 7. Scope & Constraints

**Targets:**

{{targets}}

**Constraints:**

{{constraints}}

---

## 8. Timeline

{{timeline}}

---

*Report generated by NERF on {{end_date}}*
