Module 1: Purpose, Audience and Evidence • Lesson 1.1: What Cybersecurity Writing Must Do
Slide 1 of 2
Purpose → Reader → Evidence → Meaning → Action.
Writing to Support Decisions
▸A cybersecurity report is valuable only when it reduces confusion and supports a sound decision.
▸Before drafting a single line, determine the exact decision or action your reader needs to execute.
▸The document structure flows directly from that purpose.
INSTRUCTIONAL EXPLANATION:
A document that dumps technical details without answering "what does the reader need to do?" creates risk instead of mitigating it. An incident update coordinates containment; an audit finding details control gaps; a threat brief informs defensive posture; a management briefing requests executive resources or policy sign-off.
WORKED REAL-WORLD EXAMPLE:
Unfocused: "Attached is our 40-page vulnerability scan." Action-focused: "Three internet-facing payment gateways require urgent patch deployment before Friday to close an actively exploited vulnerability."