How would you approach a security case study involving a hypothetical security issue in a client environment?
