Exam CS0-002 topic 1 question 312 discussion

It is important to provide the probability and impact data points because they help communicate the risk of exploitation of the vulnerabilities to the senior management team. Probability indicates the likelihood of the vulnerability being exploited, while impact indicates the potential harm that could result from an exploitation of the vulnerability. This information allows the senior management team to understand the urgency and priority of addressing the vulnerabilities and make informed decisions about allocating resources for remediation efforts.

In terms of the information data points that would be most useful for the analyst to provide to the security manager, I believe that the impact and the attack vector would be the top two. The impact would help the security manager understand the potential damage that could be caused if the vulnerability is exploited, while the attack vector would help them understand how an attacker could exploit the vulnerability.

AD are the only things SLT will care about

Risk evaluation in cybersecurity is built around both of those pieces combined: PROBABILITY of it happening + IMPACT of potential compromise = RISK LEVEL.

AD, senior management is not gonna give a shyte about all that other technical stuff. They want the meat and taters.

AD is correct