Vendor Contracts and Legal Requirements for Pen Testing and Vulnerability Assessments