CompTIA CASP+ Practice Test

In the event of a minor security issue discovered in a vulnerability assessment, who should the issue be reported to?

1. The security consultant

2. The team lead in a weekly report

3. The development team

4. The security manager

The correct answer is: The team lead in a weekly report

The appropriate response to a minor security issue discovered during a vulnerability assessment is to report it to the team lead in a weekly report. This approach ensures that the issue is documented and communicated in a structured manner. By doing so, it allows for proper tracking and management of security matters within the team. The team lead can then decide on the next steps and how to escalate the issue if necessary, ensuring that all team members are aware of the situation. Reporting in a weekly summary ensures that even minor issues are not overlooked, contributing to a culture of security awareness and continuous improvement within the organization. This is particularly important for maintaining a clear communication structure and ensuring accountability within the team. While other options may involve reporting security issues, they may not follow the same level of organizational process or documentation, which is critical in maintaining a comprehensive overview of vulnerabilities and their resolutions within the organization's security posture.