Which of the following is not a valid reason to use external penetration service firms rather than
corporate resources?

A.
They are more cost-effective

B.
They offer a lack of corporate bias

C.
They use highly talented ex-hackers

D.
They insure a more complete reporting