Everything from the assessment, in one place. Start wherever is useful, the findings, the proposal, or the scope builder if you would rather see it as options than as a document.
Every finding in both audits was checked twice. A second independent pass was run against each one with instructions to disprove it, and anything that could not be reproduced against the live site was cut. Where a number is an estimate rather than a measurement, it says so.