The Ethical Hack: A Framework for Business Value Penetration Testing