the Board cares what happened, not what the compliance team did 2. **Three key messages, not ten** — the constraint forces you to identify what actually matters 3. **Every metric must translate** — if you cannot explain what it means in business terms, cut it 4. **State the recommendation explicitly