The purpose is to indicate an organization its vulnerabilities then offer concrete suggestions on how to remediate them.  It’s really hard more than enough to vet candidates if You're not a highly trained technical manager. Incorporate to the salaries that information organzations