30
Sounds like you're on the right track. There are so many out there that just "hope to hell it works out". As our industry continues to mature in this age of cyber technology, a carrier's security initiatives, practices, and policies are going to ever increasingly become a determining factor in the bid process.
I might have told this story already, but here goes again; I use a 3rd party IT vendor. They are very good at what they do and were confident we had adequate security in place. We, my IT peeps executive management and I, decided to commission a security test. Only myself and two people at the IT vendor knew this was going to happen. We paid a white-hat hacker to breach the system.
The results; On the fateful day the white-hat started at 10:00 AM. In 20 minutes he had access to the network. In 40 minutes he had control of the network. In 50 minutes he was into the bank accounts. In 80 minutes my IT vendor called and said "Hey we've had a breach of the system".
Pretty scary, right? In under an hour, all your money can be gone. And, you have no way to recover it.
Needless to say both our own security, and that our our IT vendor, have improved dramatically. No one will ever be able to stop a determined hacker, but making him want to move on to easier prey is the name of the game. It's like a group of people being chased by an angry bear. You don't have to be the fastest runner. You just don't want to be the slowest.
Do you have a contact for a solid cyber security consultant?