This task can be initiated on a demand basis or on a regular defined schedule. Regularly scheduled reports should be comprehensive enough to cover all security controls and mechanisms. This will ensure that all aspects of security are being monitored and reported for efficiency and effectiveness. The on-demand reports can be from a set of pre-defined one off reporting or they may need to be custom built to obtain the required info. Caution should be given to custom reports as they themselves open an environment to security risk and can destabilize a production environment.