Practical network security : an auditee's guide to zero findings