Security is everyone’s responsibility

Ethical hacking is illegal in all situations

Only IT teams are responsible for security

Breach notification laws don’t apply to small companies