You've just been hired to perform a pen test on an organization that has been...

Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.

Interview all employees in the company to rule out possible insider threats.

Establish attribution to suspected attackers.

Start the wireshark application to start sniffing network traffic.