This post was inspired by a client who came to me and said “I do not understand all of these findings, can you explain them to me? This problem can become turtles all the way down (or up) if the client’s manager does not have any better understanding, or their manager’s manager, etc. For example, if you’re explaining Remote Code Execution, you could point the client to the Wikipedia article, or you could explain like so: