What Is an Information Security Consultant and Why Do You Need One?