Are there any benefits of creating an internal penetration testing team to regularly check the vulnerabilities of a company’s network? What are its downsides?