"Website Testing and Security

"Website Testing and Security" Please respond to the following:

• It’s important to fully test any sort of web application development for functionality, security, etc. Outline the major componenents that you would include in your test plan in order to make sure that your Web application is secure. Provide a rationale for your test plan components.
• Imagine that you are an IT Security Manager. You want to have your security team perform penetration testing as part of vulnerability testing on your current systems.  Your CIO wants to hire an outside company to perform the penetration testing.  Choose a side and argue for or against hiring an outside company.  What are the potential benefits and risks with penetration testing in general.