OSI also engages in proactive operations that test the security of agencies' systems, controls, and property.
Testing the security of agency property is one of the operations OSI engages in.
The agencies are test their own controls internally without any action by the OSI.