Holding the fort: a business case for testing security. Issue 6 (June 2016)