After penetration testing and hardening, what should you help the organization understand about threats?

• A. Hackers have time on their side, and there will always be new threats to security.
• B. Once patched, systems are invulnerable.
• C. Security is a one-time project.
• D. Penetration testing eliminates all threats.

Answer: (A)