Canada ITSG-33 - IT Security Risk Management A2-3.8.2: 3.8.2 Conduct integration security testing

The project tests all security solutions, technical and procedural, including operational and installation procedures, through functional security testing and, as the assurance requirements dictate, vulnerability assessment (no unmitigated known vulnerabilities, hardening per standards) and penetration testing; failures are investigated, fixed and retested, documentation updated, and regression testing reported.