WHAT DOES A SECURITY CONSULTANT DO?