14 NIST CSF 2.0 categories × 4-tier maturity model. The artifact every public-company audit committee asks for. Trend vs last quarter; top-finding; board-action recommendation.