Why Your Org Needs a Penetration Test Program

**Executive summary:** This transcript of a Black Hills Information Security webcast explains why organizations need a structured penetration testing program and stronger collaboration between GRC and penetration testing teams; it reviews pen test 'flavors' (network, application, social engineering, continuous), stresses the importance of contextualizing findings for business risk, remediation planning, documented exceptions, retesting, and detection as compensating controls, and offers practical guidance for prioritization, reporting, and maintaining iterative, maturity-focused security processes.