A penetration testing team is preparing the final report. Which element is MOST important to differentiate for executive leadership versus technical staff?
Select an answer to reveal the explanation.
Short Explanation
You need to split the report by audience: executives get business risk and financial impact, while technical staff get detailed findings, reproduction steps, remediation guidance, and risk ratings. That gives leadership what they need to decide and gives engineers what they need to fix.
Full Explanation
The correct answer pairs an executive summary with business risk context and financial impact for leadership, and detailed technical findings with reproduction steps, remediation guidance, and risk ratings for technical staff. Executives need business context — what risks were found, what could happen to the business, what investment is needed — not exploit details. Technical staff need detailed reproduction steps, remediation guidance, and risk ratings to remediate issues effectively. Giving executives exploit code details and technical staff only a high-level summary paragraph is wrong because executives do not need exploit code. Listing all security tools used for both audiences is wrong because tool lists have minimal value compared with findings and prioritized remediation. Giving executives raw scanner output and technical staff a written narrative analysis is wrong because raw scanner output is too technical for executives and lacks narrative context for prioritization.