Tell a high level story.
Take care that everyone is onboard.
Our job is to educate, teach and help them.
It’s their choice to fix it or not.
Ask for attestation letter to assure that you perform a penetration test, with high level description of the report.
90 days of retesting offer.
Update report if fixed.
Take it in mind for project management.