Security Testing and Evaluation: Who Should Attend