Maintenance is an essential task that is often considered to be dull. In information security, penetration testing may be wrongly perceived as being a hacker-like activity. In fact, when done correctly, ethical hacking is an important part of risk management. When done properly, penetration analysts work under very restrictive rules of engagement when testing systems Think of ways that penetration analysts limit the risk they pose to internal systems.