Penetration testing (i.e., human-facilitated testing)

As defined by the EDCI • Assessment conducted on systems or individual system components to identify vulnerabilities that could be exploited by adversaries • More active than automated vulnerability scanning, penetration testing is usually conducted by individuals or teams with relevant skills and experience including technical expertise in network, operating system, and/or application-level security