Security Risk Assessment Reporting

To the customer of the security risk assessment the project is not complete until it is documented. One of the most important elements of the security risk assessment effort is the reporting of the results. The security risk assessment team may have a clear understanding of the risks to the organization and the safeguards that should be employed, but that information must be conveyed to the organization in a clear and effective manner.