Kali Linux Intrusion and Exploitation Cookbook

Who should be doing penetration testing?

This is a challenging question; one important thing to realize here is that anyone who has knowledge of security, is kept updated with the day-to-day vulnerabilities, has performed pen testing activities in the past, is well versed in vulnerabilities and, moreover, is a person with experience and good certifications is preferred for such activities.

There are two things that one can do while considering this: either one can start an in-house security division that will perform penetration activities regularly and also monitor any active threat and identify and mitigate them in real time, or hire an external party to perform the penetration testing activity once, annually or quarterly. Invariably, the best ...