After you collect data on risks and recommendations, you include that information in a report, and you give that report to management. Why do you do this?
becauase if you dont then, if that problem ever continues again and you are for some reason not there that day then, your boss would need to know how to fix it
