From the course: CompTIA Security+ (SY0-701) Cert Prep

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Analyzing scan reports

Analyzing scan reports

- [Instructor] As a cybersecurity analyst, you'll likely spend a good amount of your time analyzing reports from vulnerability scans. One of your primary responsibilities will be sorting through the results of these scans, and presenting information from them to a variety of audiences. You'll need to provide engineers, developers, and administrators with the technical detail that they need to correct issues. You'll need to explain trends and high-level risk ratings to business leaders, and you'll need to present security management with a picture of how well the organization is doing at managing risk. As you interpret the results of any scan report, you should first focus on the five factors that we've already discussed: the severity of the vulnerability, the criticality of the systems affected, the sensitivity of information involved, the difficulty of remediation, and environmental variables such as the exposure of the system with the vulnerability. These five factors will help you…

Contents