CCPA Assessment Sample Report: What You Receive
Pages from the reports our CCPA readiness assessment produces, generated for a fictional company, Calder Ridge Partners. Every number and finding here is illustrative.
How progress is measured at the follow-up
Same controls, same scoring. A finding closes only when the control passes again, and controls that cannot be re-checked are reported as not reassessed.
Real report pages, fictional company
These screenshots come from the sample reports of our CCPA readiness assessment. The client, Calder Ridge Partners, its website (calderridgepartners.example), its people and its numbers are invented, and no real website was contacted to build them.
Screenshots only: the full sample reports are not available for download. We walk you through the complete set, page by page, on a call.
Five reports from one assessment
One page for leadership, then the detail
Every control, with the evidence behind it
Risks today and after the planned treatment
Who does what, and by when
Progress on the same controls
In the fictional sample the follow-up comes three months after the first assessment. Results for a real business depend on the work it completes.
What changes in a real assessment
Your controls, your evidence
The questionnaire is answered by your owners, and the website review reads your real pages, with every request logged.
Your risks and dates
Owners, target dates and projects are set with your team during the walkthrough, not copied from a template.
Your counsel stays involved
Legal questions found during the assessment are listed for your counsel to confirm.
Page 12 of 13: CCPA assessment sample report
- 1. CCPA and CPRA compliance (hub)
- 2. CCPA vs CPRA explained
- 3. Does the CCPA apply to your business?
- 4. Consumer rights and privacy requests
- 5. Penalties, fines and lawsuits
- 6. Implementation roadmap
- 7. CCPA for IT administrators
- 8. CCPA cybersecurity audit
- 9. Risk assessments and ADMT
- 10. CCPA compliance checklist
- 11. CCPA readiness assessment
- 12. CCPA assessment sample report (this page)
- 13. How to test opt-outs and Global Privacy Control
Guided by Ali Hassani, CISSP, C|CISO
Certified CISO (C|CISO) and CISSP with 25+ years in IT, cybersecurity, compliance and infrastructure, who has earned dozens of Microsoft and Cisco certifications over his career, including MCSE, MCITP, MCSA Security, CCNP and CCNA. OC Security Audit handles the technical side of the CCPA: data inventories, security controls and evidence as your readiness advisor, or the cybersecurity audit as your independent auditor, one role per program. Legal interpretation stays with your privacy counsel.
Questions business owners and IT leaders ask
Is Calder Ridge Partners a real company?
No. It is a fictional company with an invented website on the reserved .example domain. All names, numbers and dates in the sample are illustrative.
Can I download the full sample reports?
No. This page shows screenshots only. We walk you through the complete sample reports on a call.
Will my reports look the same?
They use the same structure and charts. The content, scores and actions come from your answers and your website.
What does the readiness score mean?
It is a severity-weighted measure of controls in place on the assessment date, for planning and tracking. It is not a certification or a legal determination.
How is the follow-up compared?
Findings are matched by control. A finding counts as closed only when the control now passes, and the scores are recomputed on the controls assessed both times.
General information, not legal advice
This page summarizes California privacy law and regulations as of October 2026 to help businesses plan their cybersecurity and IT work. It is general information, not legal advice. It does not create an attorney-client relationship and does not guarantee compliance or any outcome. OC Security Audit is a cybersecurity firm, not a law firm. Confirm how the CCPA applies to your business with qualified California privacy counsel. Enforcement examples summarize the regulators’ public announcements; settlements can resolve allegations without an admission of wrongdoing. Laws, regulations and inflation-adjusted amounts change, so check the primary sources below.
Primary sources · Last reviewed October 2026
Walk through the full sample with us
Schedule a consultation. We show the complete sample reports and explain what your own assessment would cover.
Read-only reviews. Irvine, Orange County and Southern California on-site; remote nationwide.