Effective Security Assessments and Testing