Report the results

- After the technical security assessment has been conducted…and the results have been analyzed,…the assessor needs to write the final report.…This is the key deliverable from all the efforts…spent planning, testing, and making recommendations.…Without the final report, there would be no lasting evidence…of the assessment outcome.…Even worse, there will be no written direction…for the organization to follow.…In some ways, the final report will reflect…the assessment plan that was written before any testing.…

The final report will describe why…and how the testing was done.…In addition, it will collect the system, network,…and organizational vulnerabilities,…as well as remediation recommendations.…Many final reports will have an executive summary…at the beginning,…giving a high level overview of the purpose…of the assessment and overall findings.…This summary is useful, not only to busy executives,…who don't have time to go through all the details,…it also can serve as proof that the assessment was conducted…to auditors and clients.…