However their main concern is the possibility of an employee elevating his/her privileges and gaining access to information outside of their department What kind of penetration test would you recommen