Three to five highest-impact findings - Each described in business terms: what data is at risk, what could happen, estimated financial impact - No technical details --- save those for the report