The art of penetration testing

The paper presents about the art of penetration testing. The reasons to have a penetration test are: it is a regulator requirement. To receive an objective, independent and impartial assurance to the security of the infrastructure and applications. To receive clear recommendation for vulnerability mitigation those are both straightforward to implement and tailored to the required functionality of the system under test. Ultimately, to ensure that the IT systems are not the weakest link in organisation security environment.