A transit authority VA must serve both executives and system owners. Which reporting quality best drives remediation?
Select an answer to reveal the explanation.
Short Explanation
A useful VA report is a work order, not a scrapbook of CVE stickers. Say who owns the fix, why it matters, and what "done" looks like.
Full Explanation
Actionable vulnerability reports connect each finding to affected assets, business context, severity rationale, and remediation ownership. Mixed audiences still need enough technical specificity for engineers and enough clarity for leadership. CVE lists alone do not assign work or explain impact.