During a penetration testing engagement, you have discovered a critical vulnerability that could potentially lead to a full system compromise. The client's team appears to be stressed and overwhelmed with the findings. What is the best course of action to de-escalate the situation while ensuring the criticality of the issue is understood?
Write a detailed report first and then schedule a meeting with the whole team for the next day to discuss the findings.
Begin with presenting the issues in an unplanned team meeting to ensure everyone is on the same page.
Send a company-wide email alerting all employees of the critical finding, emphasizing the need for immediate attention.
Schedule an immediate, one-on-one discussion to explain the findings to either the primary or technical contact before wider communication.