$ 0 0 A provider doing an ICT security review should give the client what they need, not what they want, says security specialist Daniel Ayers.