Question

A security analyst must present the results of a recent vulnerability assessment to the company's board of directors, none of whom have technical backgrounds. The raw report contains CVE identifiers, CVSS vectors, and remediation commands. Which approach will MOST effectively communicate the findings to this audience?

Accepted Answer

Translate the technical findings into business risk language, showing potential financial and operational impact alongside high-level remediation timelines

Answer

Present the complete scanner output so the board has full visibility into every CVE and CVSS vector identified

Answer

Provide a detailed list of the specific patch commands and configuration changes required for each affected host

Answer

Focus the presentation on the number of scanner plugins executed and the technical scan coverage percentage