Questions

1. Potential incidents represent threats that have yet to happen. Why is the identification of the threat important to maintaining security?

2. Penetration testing is a particularly important contributor to the incident management process. Explain why that is the case, and provide examples of how penetration test results can be used to improve the incident response process.