I visited a client today. The manager I was talking to wanted me to perform a security assessment for his team. He put lots effort in saying "We only need one security assessment, as we need to tick off a box from our checklist." I got a feeling this was not right, but I can not quite put up an...