Is Your Firm’s Cybersecurity Actually Secure?