The correct answer is Present risk findings using plain language and visual summaries.

Present risk findings using plain language and visual summaries is correct because plain language removes technical jargon and helps nontechnical leaders and business stakeholders quickly understand the nature and impact of a risk. Visual summaries such as dashboards, heat maps, and concise executive summaries make priorities and trends visible at a glance and reduce the cognitive load required to interpret the information.

Present risk findings using plain language and visual summaries also promotes action because it pairs findings with clear recommendations, named owners, and timelines. That combination makes risk information not only understandable but also immediately actionable for decision makers and operational teams.

Distribute comprehensive technical risk reports to every staff member is incorrect because comprehensive technical reports are often too detailed for most staff and they can overwhelm readers. Broad distribution of deep technical content dilutes focus and does not ensure that decision makers understand what to do next.

Security Command Center is incorrect because a command center is typically a monitoring and management tool and not a communication strategy. It can help security teams detect and investigate issues but it does not by itself ensure that diverse stakeholders receive clear, tailored, and actionable summaries.

Mandate company wide instructor led risk training sessions is incorrect because training is useful for building long term awareness but it is heavy weight and not the best mechanism for delivering timely risk updates. Mandatory instructor led sessions are resource intensive and do not guarantee immediate action on specific risks.

Full AWS Practitioner Certification Question