SOC for Cybersecurity - Cybersecurity Risk Management Examination DC16: DC16 Process to evaluate and communicate threats, vulnerabilities and control deficiencies for timely correction

Describe how identified threats, vulnerabilities and control deficiencies are evaluated and communicated promptly to the people who must take corrective action, and, where appropriate, up to senior managers and the board, how evaluation results are assessed, and how remediation is tracked.