“a security professional's guide”