Definitely! But speaking of pen-testing, there are some “funny” stories about pen-testers getting temporarily apprehended and questioned by security or the authorities when communication between their employer and their client wasn’t done properly. I wonder if the IT Crowd at my agency would notice if I did an unsanctioned, unauthorized port scan from my office desktop…