UNDERSTANDING CYBER SECURITY TESTING AND EXTERNAL PENETRATION TESTING