While there are many articles directed at assessors and consultants on “what not to do” during a penetration assessment, I haven’t seen...