Penetration testing can help security administrators of a healthcare company figure out how effective their defensive measures are, but not all pen testers possess the same skill level