Mechanisms exist to utilize an independent assessor or penetration team to perform penetration testing.