Lisa Vaas, HP Input/Output, talks with David Snead about how infosec people can craft work statements that protect them from liability if anything explodes when they're mucking about in clients' code.