"pen testing" is not the act of checking to see if pens work, as google has just informed me, though the story would be hilarious if it was. It's short for penetration testing, which is checking for vulnerabilities in a security system.