CompTIA · CySA+ CS0-004
Vulnerability management reporting
CySA+ CS0-004 · Lesson 21 of 22 · 2:58:14
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: vulnerability scan reports, compliance findings, risk scorecards, action plans with dependencies and escalation, inhibitors to remediation, stakeholder communication, and metrics and KPIs like trends, top risks, and SLA compliance. Includes three original practice questions.
Preview the topics
- The board wants a one-page view of vulnerability risk for each business unit, with a few indicators and colors. What should the SOC give the board?
- A hardening setting would fix a medium finding on the core banking server, but testing shows that it breaks the connection of an old branch application. Which inhibitor to remediation is this?
- The CISO wants to show the board whether remediation is getting faster or slower over the last four quarters. Which metric fits best?