CySA+ - Reporting and Communication - Vulnerability remediation action plans