Issue: This law firm had never conducted a penetration test. The key management executives wanted to ensure the security of the firm’s sensitive information, including professional contact lists, sensitive email correspondence and employee social security numbers. The firm was also concerned about the theft of proprietary material such as internal methodologies and firm strategic plans.