Question

A security analyst must present the quarterly vulnerability posture to the board's risk committee, which includes no technical staff. The analyst wants members to quickly grasp which business units carry the most unresolved high-risk exposure so budget can be directed appropriately. Which reporting approach BEST serves this audience and goal?

Accepted Answer

A risk heat map that plots business units against risk severity using color coding, accompanied by brief plain-language takeaways

Answer

A raw export of all open findings from the vulnerability scanner sorted by CVE identifier and plugin ID

Answer

A detailed table listing each affected host's IP address, CVSS vector string, and remediation command syntax

Answer

A packet-capture summary showing the network traffic patterns associated with each vulnerable service