The focus is on clear agreements, a clear scope, imitable evidence, reproducible findings and reporting that is useful for different target groups.
A technical team wants details to solve problems. Management wants to know what the risk means. An auditor wants to be able to assess whether the investigation has been carried out carefully.
Read more at MIAUW.