What You Need to Know About Vendor Penetration Testing
Your vendor should be guarding against intrusion into the systems network from the outside and conducting regular penetration testing through a qualified credible resource.
You should insure that penetration testing is being performed on any vendor who has access to or stores your consumer private information or sensitive data.