CySA+ exam prep: reporting and communication
You write vulnerability and incident reports for their readers, build a metrics dashboard and learn notification duties and crisis communication.
Level 301 · 12 lessons · 9 practice labs
Lessons
Vulnerability reporting
- Writing a vulnerability report: executive summary and technical appendix
- Metrics: time to remediate, age of open findings, trends
- Building a findings dashboard
- Language for each stakeholder: management, system team, legal
- Action plans: ownership, timeline, follow-up
- Short task: prepare a monthly vulnerability status report
Incident communication
- Communication during an incident: who, when, how much
- Legal notification duties: principles shared worldwide
- The incident report: timeline, impact, recommendations
- Drafting a statement for customers and the press
- Incident metrics: time to detect and respond
- Capstone: write an executive briefing and a technical report for an incident
Practice labs
- Write an executive summary for a vulnerability report: From a thirty-finding technical report you write a five-sentence jargon-free executive summary and three priority decisions.
- Calculate time to remediate and age of open findings: You run a script computing mean time to remediate, age of open findings and the trend from a three-month export and interpret it.
- Prepare the monthly vulnerability status pack: For Erguvan Eczanesi you produce a monthly report from the data with metrics, overdue fixes, exceptions and next month's plan.
- Explain one finding to three audiences: You write one critical finding as three short paragraphs for management, the system team and legal.
- Draw up an action plan with owners and dates: You turn ten findings into an action plan table with owner, deadline, dependency and follow-up date.
- Justify a risk acceptance memo: You prepare an exception memo for an unpatchable system with compensating control, residual risk, duration and approver.
- Write a status update during an incident: You write a short message for an ongoing incident with knowns, unknowns, actions taken and the next update time.
- Assess the duty to notify: For an incident affecting personal data you tabulate who must be told, how fast and with what content, following commonly shared principles.
- Complete an incident report with its timeline: From raw incident notes you write a report with timeline, impact, root cause, detection and response times and recommendations.
About this course
You write vulnerability and incident reports for their readers, build a metrics dashboard and learn notification duties and crisis communication.
What you will learn
- Vulnerability reporting
- Incident communication
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.