Testing usually covers vulnerability scanning, a sample of your devices, MFA checks, patch verification and malware protection checks.