As a cybersecurity analyst, you have discovered a zero-day vulnerability in a widely used enterprise application. What is the most appropriate initial action to take in terms of vulnerability management reporting?
Focus on monitoring network traffic for any signs of exploitation before reporting to avoid unnecessary alarm.
Initiate an incident report to document the vulnerability and start the communication process with relevant stakeholders.
Document the vulnerability and send out a general email to all employees to ensure they are aware.
Assess the risk score of the vulnerability and start working on the development of a patch before reporting.