Consider how risk management and penetration testing fit into the NIST Framework Core. List which of the framework functions are most applicable to a penetration test.