Are there consequences for employees who do not report a known security vulnerability?
Yes, failing to report a known security vulnerability can lead to disciplinary action, as it undermines the organization’s ability to protect sensitive information.