Maintenance is an essential task that is often considered to be dull. In information security, penetration testing may be wrongly perceived as being a "hacker-like" activity. In fact, when done correctly, ethical hacking is an important part of risk management. Penetration analysts work under very restrictive rules of engagement when testing systems. This week's project is research on the many ways that penetration analysts limit the risk they pose to internal systems.