A security leader needs a shared vocabulary for discussing the organization's security posture with leaders in other industries and with vendors. Which tool best fits that need?

### Why this is right A cybersecurity framework provides a common language and a set of standards for security leaders to understand security posture across countries, industries, and vendor relationships. That directly matches the need in the scenario. ### The concept Frameworks can also help organizations define processes and procedures for assessing, monitoring, and mitigating cybersecurity risk. They provide structure for communication and work. A particular technology solution may address one security need, but it does not supply the same broad shared language. ### The other options - **A single implementation solution**: This is a specific means of addressing a need, not the shared structure described. - **A non-mandatory guideline alone**: Guidelines offer recommendations but are not the framework role described. - **A task procedure alone**: A procedure gives steps for a task rather than a common language for organizational security posture. ### Terms - **Vendor**: An external supplier of goods or services. - **Security posture**: The state of an organization's security. ### Remember For shared security language across organizations, look to a framework.