The CIO of your employer, or a firm you are familiar with, asked you for a report on conducting an IT security evaluation. Do not conduct the evaluation; only write a report for how to do so.
Write a report containing the following sections:
Introduction - purpose of the proposal
Background on an IT Security Evaluation - what it is?
Proposed work effort
Proposed benefits
Resources will come from a security firm. Do not attempt to communicate the cost.