Most companies have subscribed to the theory that regular network penetration testing is a security standard or table stakes in the protection of the network, applications, and data. The Cisco incident response team also recommends regular proactive internal threat hunting. This is just one component of the Cisco Incident Response Retainer program that helps strengthen client's security posture.