- Letter form (has TCM sec with address then date then democorp and address)
- “To whom it may concern:”
- Could be pretty much a copy and paste from the executive summary
- Add summary of findings
- Add if they remediated the findings and what was the date for that, as well as the remaining un-remediated findings and their severity (critical, high, moderate, low, information)
- Signed by the pentester