The key concepts of penetration testing and other permitted ways of testing the security of systems and procedures. How to think like and act like an attacker, with the aim of acquiring information that can be used to make a system or entity more secure.