PENETRATION TESTING AND VULNERABILITY ASSESSMENTS IN CYBERSECURITY