From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Unlock the full course today

Join today to access over 24,600 courses taught by industry experts.

Reporting security status

Reporting security status

From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Start my 1-month free trial Buy for my team

Reporting security status

“

- [Instructor] Multiple teams will need insights into the current security state of your software in order to plan future changes accordingly, and you can report that security status through reports, dashboards, and feedback loops. There's one question that you should ask yourself every time you sit down to prepare any information that you intend to share with other teams, and that question is who's your audience? Are they executives, mid-level managers, frontline employees? Are they highly technical or are they more business oriented? If you don't know your audience going in, chances are you'll spend a lot of time and effort working on things that just won't be relevant to them. Once you've identified your audience, you can ask a few probing questions to make sure that the information you're preparing for them will really resonate. First, what do they need? Don't share unnecessary information with anyone. Not only will it distract them from what you're trying to accomplish, but…

Contents