Evaluating the Gasday Security Policy Through Penetration Testing and Application of the Nist Cybersecurity Framework