SRA

A regulator review found most law firms skip penetration testing entirely. Here is what the SRA’s data actually shows, what a proper scope should cover, and how often to test.