Relying only on internal personnel – PENETRATION TESTING