CISM: Certified Information Security Manager

Penetration testing simulates real-world attacks to identify exploitable weaknesses and validate security controls before a system is placed into production. Performing it when a new system is about to go live provides an opportunity to remediate findings before operational exposure.