Penetration tests are a staple among most security programs. They prove that problems exist, which most people already know, and potentially demonstrate the value of a compromise. However they do little to actually secure an organization. This session will discuss how to design penetration tests that actually improve the security of an organization.