Analyze and communicate attack paths — chained weaknesses from entry to impact — so leaders see business risk, not isolated CVEs. Use when reporting red team results, prioritizing remediation, or modeling how adversaries would traverse the environment.