The situation
[Client name] had [X] weeks to answer a major client's security questionnaire. Their previous provider said everything was fine.
The uncomfortable truth
[X] former staff accounts were still active, Microsoft 365 was on default settings and backups had never been tested.
"It wasn't what we wanted to hear. It was what we needed to hear."
The outcome
Submitted on time, with evidence. Passed with no findings. [Add the commercial outcome.]