A decade ago, most enterprises in the U.S. did not properly understand what penetration testing was. Even in recent years, most healthcare organizations have still struggled to fully grasp the nuances of these exercises.
John Nye's full article can be found here.