A large financial services firm engaged a team from SecureIT to define and execute a strategy for testing key information security-related controls, as well as to design a suite of metrics for measuring and reporting on risk and control trends over time.