External security consultants inquiry findings