Watch this video on YouTube
According to the Payment Card Industry Data Security Standard, when is it necessary to conduct external and internal penetration testing?