Learning to swim is synonymous with learning to use pen testing in cyber security management.  The first step in learning to swim is to identify your goal.  Two crucial goals of penetration testing is to reduce loss of data and loss of profits.