Executive reporting around Vulnerability and Patch Management

I'm trying to understand and better learn what executives want reported and find useful around vulnerability and patch management. Any of you have success providing metrics and data around VM/PM to your executives? What metrics do they like? Which are useful? Which are not? Any recommended things to avoid?

cybersecurity executive management patch patch management reporting vulnerability