External Penetration Testing - simulating an external performing a targeted attack. Internal Penetration Testing - simulating an internal attack by a disgruntled employee or a malware infected workstation. Vulnerability Assessment - identification of potential security flaws within the network by looking at the overall network as well as at each component that makes up the network. Mitigate security vulnerabilities identified and where possible, instructions on how to fix the security flaws reported.