Some execs also think it's better not to know because they think they won't be responsible then. I have seen this with managers opposing pen testing because the

Some execs also think it's better not to know because they think they won't be responsible then. I have seen this with managers opposing pen testing because they were worried about the consequences of finding vulnerabilities.