Originally Posted by SATTSO

I have read the GAO reports and put very little faith in those red team or asi testing.

Edit: oddly enough, to better catch and pass such "test", TSO would have to do what Trollkiller calls "illegal searches".