A guide for law firms to successfully pass a client security audit