Testing is the last step before we deliver the system product to the customer. Different from functional testing, security testing focuses on if the security properties are satisfied. The process may include vulnerability scans for known issues, security assessments on the response of the system, penetration tests to simulate an attack, security reviews for the code and documentation, and security audit for the compliance issues.