Attack and Penetration helps to determine that systems operate within an acceptable level of risk.