Board Reporting
Scope and reproducibility page
What the assessment covered and what it would take to reproduce it, so the result can be reconstructed after the evidence has expired.
What it is
A page stating the account and regions covered, and the versions and settings that produced the result.
Why reproducibility is stated in the pack
The raw evidence expires within days. If the only record of what produced a document lived in the evidence, the question would become unanswerable almost immediately.
What it records
The engine version, the scanner and its version, the severity scope, the regions scanned, the evidence confidence and the generation time.
Why scope is stated even when it is the default
Because the default is every enabled region, and a reader cannot distinguish "we scanned everything" from "we scanned what we were pointed at" unless it is said.
What it does not mean
Reproducibility here means the same evidence yields the same score. It does not mean the environment can be restored to the state it was observed in.