Explain some of the security risks associated with VPNs. Describe how organizations can mitigate these risks. Determine the effect of penetration testing and any applicable laws on VPNs.