Security managers must be able to translate technical complexity into understandable business language. Well-written risk reports enable the problem to be successfully presented to the highest levels of the company.