penetration testing vulnerability assessment risk mitigation expertise security information security network security network security assessment security assessment