Every system needs to be tested on a regular basis to ensure that it has been securely designed  implemented and maintained For example  many organizations install Web Portal Applications  Mobile Applications  Firewalls  Routers  VPNs and Web Server Applications straight out of the box  using default passwords and configurations that could leave them exposed to serious security vulnerabilities and intrusions