4.0 Reporting and Communication

Question 1

Vulnerabilities

Question 2

Affected hosts

Question 3

Risk score

Question 4

Mitigation

Question 5

Recurrence

Question 6

Prioritization

Question 7

Compliance reports

Question 8

Action plans

Question 9

Configuration management

Question 10

Patching

Question 11

Compensating controls

Question 12

Awareness, education, and training

Question 13

Memorandum of understanding (MOU)

Question 14

Service-level agreement (SLA)

Question 15

Organizational governance

Question 16

Business process interruption

Question 17

Degrading functionality

Question 18

Legacy systems

Question 19

Proprietary systems

Question 20

Metric and key performance indicators (KPIs)

Question 21

Trends

Question 22

Top 10

Question 23

Critical vulnerabilities and zero-days

Question 24

SLOs

Question 25

Stakeholder identification and communication

Question 26

Incident declaration and escalation

Question 27

Executive summary

Question 28

Who, what, when, where, and why

Question 29

Recommendations

Question 30

Timeline

Question 31

Impact

Question 32

Scope

Question 33

Evidence

Question 34

Legal

Question 35

Public relations

Answer 35

Customer communication
Media

Question 36

Regulatory reporting

Question 37

Law enforcement

Question 38

Root cause analysis

Question 39

Lessons learned

Question 40

Metrics and KPIs

Question 41

Mean time to detect

Question 42

Mean time to respond

Question 43

Mean time to remediate

Question 44

Alert volume