This question is for people who work for the government.
What type of vulnerability testing do you do within your organization to fix issues that could raise questions come audit time?