Penetration Tester

Human roleSafety & SecuritySafety, Security & Governancearc:PenetrationTester

An external security specialist who attempts to compromise systems holding personal data using the same techniques malicious actors employ, to reveal exploitable vulnerabilities before attackers do.

Responsibility. Identifies exploitable security weaknesses through simulated attacks.

Also known as: External security firm

Direct neighbourhood (hover for relationship types)

Relationships

evaluates assurance

Quantitative guidance

As stated by the sources; verify before use.

Penetration testing performed quarterly (Ch9.7 fintech platform).

Classification

Quality attributes: Security (ISO/IEC 25010 | NIST AI RMF: secure and resilient)
Risks mitigated: Exploitable vulnerabilities in personal-data systems
Frameworks & regulations: GDPR Art. 32

Sources

Ch9.7: T. Nguyen, "GDPR and Data Protection Regulations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.7. ISBN: 9798244538229.
Ref9.05: "Privacy and Data Protection for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/05-Privacy-Data-Protection.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note