A county stakeholder wants CVSS numbers only and no written impact narrative. What should the tester advocate?
Select an answer to reveal the explanation.
Short Explanation
A number without a story is like a speed limit sign with no road. Scores help sort the queue; narratives tell the county why it matters on their systems.
Full Explanation
CVSS and similar scores support consistent triage, but they do not fully capture local asset context or operational impact. Professional reports combine scoring with clear narratives tailored to the environment. Score-only delivery under-informs executives and engineers alike. Balanced reporting improves remediation decisions and residual-risk honesty.