Generating and exporting Risks reports
Only users with admin permissions in Barracuda Cloud Control can view the Reports page.
The Identity risks section is generated from data collected by Entra ID. If you don’t use Entra ID, the Risk report doesn’t report on these risks.
The AI Security Risks section generated from data collected by Barracuda SecureEdge or Cisco Umbrella. If neither of these applications are implemented in your environment, the Risk report doesn’t report on these risks.
If you want to generate a recurring report on a schedule, see Scheduling Reports.
BarracudaONE’s Risk report helps you identify, understand, and communicate the security risks associated with AI tool usage and Entra ID vulnerabilities in your environment. Use the report to review detected AI applications, assess unresolved risks, identify high-risk users and tools, and determine the actions you can take to reduce exposure and improve governance, as well as review detected identity security risks.
The following are the elements you can include in your report.
Identity risks
This risk… | Indicates… |
|---|---|
Identity | Selects all the identity elements below. |
Identity risk level | Shows your overall identity security posture (0-100) and the severity of key security gaps. |
Risks unresolved | Lists critical identity security issues that need immediate attention. |
Take action | Provides prioritized recommendations to reduce identity-related risk. |
Entra ID environment | Shows the size of your Entra ID environment to help you understand your identity attack surface. |
Two-step login coverage | Shows what percentage of users are protected with multi-factor authentication (MFA). |
Inactive and unmanaged access | Highlights inactive accounts and unmanaged devices that increase your security risk. |
Privileged account security | Evaluates whether administrator accounts are protected with controls such as MFA and least-privilege access. |
Global admin count | Shows your global administrator count and whether it aligns with security best practices. |
Attackers can | Shows what attackers could access or control if an identity or admin account is compromised. |
At stake | Highlights the business assets and operations at risk from identity-based attacks. |
Security controls that protect identities | Shows which security controls protect identities, including MFA, conditional access, and password policies. |
Resilience across the lifecycle | Product coverage across identity, detect, recover, and protect stages. |
AI Security risks
This risk… | Indicates… |
|---|---|
AI security | Selects all the AI elements below. |
AI usage risk | Overall indicator of how risky current AI usage is based on unreviewed and high‑risk tools. |
Unresolved risks | Identified AI‑related security and governance issues that may result in data or compliance risks. |
Take action | Recommended steps you can take to reduce AI‑related risks and improve control. |
Major vulnerabilities | Guidance and resources outlining the rationale for immediate action to mitigate identified AI risks. |
What’s at risk? | These are the assets and outcomes your organization stands to lose from unmanaged AI usage. |
Potential risk escalation prediction | Helps you understand how inaction today can lead to higher security risk over time. |
AI usage summary | A consolidated view of all detected AI tools, categorized by their approval status. |
AI categories | The most common types of AI tools being used, grouped by their primary purpose. |
Top AI risky tools | Top AI risky tools with the highest usage across users. |
Top high risky AI users | Users who interact with high risk and unreviewed AI tools most frequently or across multiple tools. |
To generate a report
In the left navigation menu, click Reports, then click Report.
Click Risks report.
If you haven't selected an account, click the Account switcher, then select your account.
To choose a time frame for the report, do one of the following:
Select an option in the Time frame box.
Select a date in the Start date box, and select a date in the End date box.
Click Edit report.
In the Customize report area, if you want to show logos on the report, select any of the following:
The Display check box next to the Account Logo.
The Display check box next to Your Logo.
In the Customize report area, select the check boxes of the AI risk-related items you want to show:
AI security
AI usage risk
Unresolved risks
Take action
Major vulnerabilities
What’s at risk?
Potential risk escalation prediction
AI usage summary
AI categories
Top AI risky tools
Top high risky AI users
In the Customize report area, select the check boxes of the identity risk-related items you want to show:
Identity risk score
Unresolved risks
Take action
Entra ID environment
Two-step login coverage
Inactive and unmanaged access
Privileged account security
Global admin count
Stolen identities unlock
At stake
Security controls that protect identities
Resilience across the lifecycle
Click Save
.
To export a report
Exporting a report generates a PDF of the report
Generate your report using the To generate a report procedure above.
Click Export.
The report downloads to your Downloads folder.