In order to effect change, increase their budget, and hire more folks, a security team needs to increase their perceived value to an organization. That means explaining to executives what you do (in terms they’ll understand), end users why you’re here to help them (not out to get them) and developers how you can partner to deliver better products. Reports of vulnerabilities, risks, and threats are only useful if they are widely read, understood, and acted upon. Whether that happens is largely a reflection of how well their message is delivered. I’ll cover how to craft a story, develop a style, and understand your audience, in order to deliver effective reports. Attendees will leave with a process to write (and evaluate) clear, concise, and actionable reports for a wide range of stakeholders.