For the DTCC Architecture Review Board approval of SaaS MAnager I need proof that Flexera has periodic penetration testing done by an independent firm on a regular, recurring basis.  Results must be documented, remediated and retained.  Where can I find this?

Thanks!

Anne Sisk