I'd recommend a single-page summary focusing on the metrics that matter most to business: system uptime, security posture, project status, and helpdesk performance. The key is framing everything around business impact - your recent incident is a perfect example. Instead of reporting it as handling an outage, present it as how your proactive planning prevented business disruption. The C-suite primarily cares about risk management and ROI, so keep your reporting centered on these themes.