How to Conduct a Product Security Test: And How it Fits Into the Larger Security Strategy