“My job is to explain the vulnerability, explain the impact, provide some examples, And hopefully, if I'm good at my job, provide here's what the mitigation would be and here's how much mitigation would cost.”

Transcript evidence from Mike Landeck -- Security Must Meet the Needs of the Business.