Henry’s organization leverages penetration testing as part of its ongoing security practices, using attacker techniques as well as blue teaming to improve security constantly. What type of penetration testing methodology is Henry’s organization using?

Integrated penetration testing combines both offensive and defensive techniques and is often woven into an organization’s practices on an ongoing basis. Offensive penetration test- ing involves acting like attackers, including nation-state actors with advanced capabilities like those described in this question. Defensive penetration testing seeks to allow the organiza- tion to learn as defenders. Physical security testing involves testing an organization’s physical security defenses and practices, including guards, locks and doors, and other physical security components like access control vestibules.