Question

A CySA+ analyst must distribute the results of a quarterly vulnerability assessment to three groups: the server engineering team who will apply fixes, the CISO who reports to the executive committee, and the compliance team preparing for an upcoming audit. The analyst wants to maximize the usefulness of the same underlying data for each group. Which approach best communicates the findings to all three audiences?

Accepted Answer

Provide the engineers a detailed remediation list with affected hosts and CVEs, give the CISO a summary of risk trends and business impact, and map findings to control requirements for the compliance team

Answer

Send the full raw scanner export with per-host CVE detail to all three groups so everyone has complete information

Answer

Create a single executive summary with risk trends and distribute it unchanged to all three groups

Answer

Delay reporting until every finding is remediated so that only a clean, final report is shared with each group