7  Has your company ever experienced a data breach? If so, how recently?
11  Has your email account ever been pwned in a data breach?
17  Does your company/organization utilize open-source software?