Watch this video on YouTube
The PRIMARY purpose of performing an internal attack and penetration test as part of an incident response program is to identify: