[X] is an online software company that specialize in selling ad spaces in their parent company’s magazine.  [X] manages an online database that allows their customers to upload and pay for their business ads for magazine placement.  Because [X]’s database needs to connect to the parent company’s database, the parent company has requested that [X] system be assessed and verified as secure.