A security analyst must communicate the results of a vulnerability assessment to a non-technical business unit manager. Which approach best aligns with CySA+ reporting and communication principles?

Question

Accepted Answer

A. Translate technical findings into business risk language with prioritized remediation actions and business impact. Effective communication with non-technical stakeholders requires translating technical vulnerability findings into business risk terms, highlighting the most impactful issues and providing clear, prioritized remediation actions. The CySA+ Reporting and Communication domain explicitly covers stakeholder communication and action plans as part of vulnerability management reporting.

A security analyst must communicate the results of a vulnerability assessment to a non-technical business unit manager. Which approach best aligns with CySA+ reporting and communication principles?

Related Questions

Discussion