In an executive summary, how should high-risk findings be presented?

• A. Start with all findings regardless of risk
• B. Begin with high-risk findings and prioritize from there
• C. Only present executive summaries
• D. List only technical details

Answer: (B)

In an executive summary, the emphasis is on risk prioritization and business impact. Present high-risk findings first so leadership immediately sees where the greatest threats to objectives lie and what actions are needed to address them. This order helps decision-makers quickly assess potential impacts on timelines, budget, and operations, and allocate resources accordingly, followed by lower-risk items if needed. Details should be concise and action-oriented, including a brief note on impact, likelihood, and recommended mitigations. Starting with all findings regardless of risk or focusing only on technical details would overwhelm the audience or omit the essential business context executives need to make informed decisions.