Consider how risk management and penetration testing fit into the NIST Framework Core. List which of the framework functions are most applicable to a penetration test.

Assess how independent penetration testing is used to identify vulnerabilities and mitigate risks.