Intro to security consulting: an impact-driven approach (part one ...