Firewalls and penetration testing

The organisation has firewall technology used at all internet points of presence and has formal documented firewall configuration standards. These points are tested to understand any vulnerabilities at least every two years.