When compiling a status report in the context of an ongoing penetration testing engagement, which of the following elements is most appropriate to include?
A full risk rating of every finding
Final analysis of the business impact for each finding
Comprehensive debrief on the tester's tactics and tools
An attestation of findings similar to the final report
Detailed remediation steps for all discovered vulnerabilities
Progress against planned milestones