Lorena, the CIO, wants to ensure that the company's security practices and policies match well with their firewall security configuration for maximum protection against hacking. Which of the following actions should Lorena take?

Hire a penetration tester.

Purchase a different firewall.

Do nothing. The company's data is safe.

Implement new security practices and policies.