Penetration tests are performed annually - any security problems are reported and fixed as soon as possible.