The NIST Framework Core describes five major functions where the security posture for each sector can be measured:

Identify

Protect

Detect

Respond

Recover

Consider how risk management and penetration testing fit into the NIST Framework Core. List which of the framework functions are most applicable to a penetration test.

Assess how independent penetration testing is used to identify vulnerabilities and mitigate risks.