PENETRATION TESTING : EXPOSING VULNERABILITIES BEFORE THEY'RE EXPLOITED