Draft – Risk Assessment.

https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistsp…

EXECUTIVE SUMMARY

The executive summary should be one page and generally is set off from the body of the report this is the quick overview of the report – so if you only had two minutes to get the key points of the entire document across what would you say?
The executive summary should be a call to action – You are telling management this is what they need to do based upon this report and its findings.
How are you quantifying the risk? What is the scale that you are using?
Add a conclusion.