When should you do a penetration test?
linux-audit.com