Email Record: CISO's guide to penetration testing