The college shall employ automated vulnerability scanning tools to routinely scan all systems and applications for vulnerabilities and configuration errors.

The college shall conduct regular penetration testing on systems and web applications to identify and address potential security vulnerabilities and protect against cyber threats and attacks.