A face-to-face presentation of findings and recommendations (where applicable).
An executive summary that examines the overall assessment process and results including highlights of specific high priority vulnerabilities and findings.
A management summary that groups, categorizes, and ranks vulnerabilities by severity level, as well as recommends mitigation techniques and time/resource requirements.
Technical reports which include detailed processes and/or findings from each phase of the assessment. This report includes technical mitigation recommendations, technical process improvements and recommendations on proactive mitigation strategies, depending on the situation.