https://www.pivotpointsecurity.com/network-security-management-vs-network-penetration-testing/