> How do I turn the specific knowledge of the exploit into a more meaningful defense than if [...] By being able to raise an alarm and allocate actual time to

> How do I turn the specific knowledge of the exploit into a more meaningful defense than if [...] By being able to raise an alarm and allocate actual time to fixing/mitigating it, unlike if it was only a vague warning. We know that there's never been a day where Windows didn't have a critical, remote-code execution, security flaw. Obviously if you're still using it management isn't doing anything proactive to improve security so you need these motivators.