A CySA+ analyst produces a monthly vulnerability report showing that 40% of critical findings from the previous three cycles remain open past their SLA. During the report review meeting, the CISO asks why remediation is stalling. The analyst discovers that findings are listed by vulnerability and affected host, but no named individual or team is designated as responsible for closing each item. Which change to the reporting process would MOST directly improve remediation follow-through?