Provision for External Information Technology Audit and Vulnerability Assessment & Penetration Testing