Present findings in business risk terms - Use attack narrative to make the risk tangible - Provide clear recommendations with effort/impact analysis - Request specific investments or organizational changes