Issue: This insurance firm had never conducted a complete vulnerability assessment. The key management executives were especially concerned about the security of their off-site disaster recovery site. In addition, they wanted to ensure the security of the firm’s sensitive and proprietary information.