Time

Report is typically delivered within a week after the engagement ends.

Type

Report should highlight both non-technical (executive) and technical findings

Recommendations

Recommendations for remediation should be clear to both executives and technical staff