Issue: This insurance firm had never conducted a penetration test. The key management executives wanted to ensure the security of the firm’s sensitive information, including professional contact lists, sensitive email correspondence, workers compensation claims and employee social security numbers. The firm was also concerned about the theft of proprietary material such as internal methodologies, sales and marketing templates, organizational budgets and firm strategic plans.