Issue: As most middle-market brick-and-mortar retailers, this specific retailer had never conducted a complete penetration test of their technology infrastructure. While they had invested significantly in technology to run operations and had considered it a priority, pressing business matters had always pulled them away from conducting the assessment. The company processed tens of thousands of orders annually, but because it did not have a large online presence, it did not have the same level of technology staff capabilities as an online retailer. With credit card and identity theft so prominent in the press, customers were becoming increasingly concerned about the level of security the company provided.