Debra Herrmann recommends that because attackers are not biased by
knowledge of a systems design or security protection mechanisms, testing of
the integrated system by the system’s engineers be augmented by independent
testing by a disinterested third party.