A properly conducted penetration test can yield tremendous benefits. It can reduce the possibility of financial losses and corporate embarrassment by providing tangible evidence of exposures before they are exploited. Such efforts can teach some real-life lessons to in-house IT staff and facilitate continual security improvement while demonstrating due diligence for publicly held or heavily regulated organizations.
The link for this article located at eWeek is no longer available.