CompTIA CySA+ (CS0-003)Reporting and CommunicationMedium
During a monthly security review, a security analyst notes a consistent increase in the number of successful brute-force attacks against SSH services, despite existing lockout policies. The analyst needs to communicate this trend to the network operations team to prompt a configuration change. Which of the following communication methods is MOST effective for conveying technical details and facilitating immediate action?
- AAn email to the network operations team manager summarizing the trend.
- BA presentation during the quarterly CISO briefing highlighting the risk.
- CA casual mention in a team chat with a link to a dashboard.
- DA formal incident report submitted through the ticketing system with detailed logs.
Show answer & explanationAnswer & explanation
Correct answer: D. A formal incident report submitted through the ticketing system with detailed logs.
A formal incident report submitted through a ticketing system provides a structured way to convey technical details, attach relevant logs, assign ownership, and track remediation, which is crucial for facilitating immediate and documented action by the network operations team.
Why the other options are wrong
- A. An email might be overlooked or lack the formal tracking and detailed evidence needed for immediate action.
- B. A CISO briefing is too high-level and not timely enough for an operational issue requiring immediate configuration changes by a specific team.
- C. A casual mention lacks the formality, detail, and tracking necessary to ensure the issue is addressed effectively and promptly.
Technical Communication
The process of conveying complex security details, findings, or recommendations to technical stakeholders to enable informed decision-making and action.
- Requires precision and supporting evidence.
- Should facilitate clear understanding and actionable steps.
- Often uses ticketing systems or formal reports for tracking.
Memory trick: For technical action, use a structured ticket, not just talk.