They demonstrate that the assessment was thorough (you tested these areas and found them effective) - They acknowledge the client's security investments (important for morale and continued funding) - They provide context for the negative findings (the security program is not entirely broken) - They