5. Reporting and Communication (17%)

Reporting and communication is where security work becomes organizational change. Vulnerability assessments, IR activities, and risk analysis only drive improvement when findings are communicated clearly to the right people at the right level of detail. At 17% of the exam, this domain tests a skill set that's distinct from technical analysis: translating technical findings into business language, structuring reports for different audiences, and communicating effectively under the pressure of an active incident.