We have already seen earlier in this chapter different types of reports. The executive reports are the ones that are meant for the top-level executives within the organization who are more interested in knowing the status of critical and high severity vulnerabilities.

This metric indicates the percentage of total systems in which the critical and high severity vulnerabilities have been fixed or mitigated. This can give confidence in the overall remediation strategy of the organization.