Templates and techniques for writing executive summaries that drive remediation.
Finding the bug is only 50% of the job. Convincing the client to fix it is the other 50%. Most clients skip the technical details and go straight to the executive summary.
"If they don't understand the impact, they won't approve the budget for the fix."
My top tip: Use clear business-risk language. Instead of saying 'SQL Injection found', say 'Critical vulnerability allows unauthorized access to customer payment data'.