A lot of forward thinking companies employ white hat hackers to discover vulnerabilities so this makes a lot of sense. Although government IT systems are usually 15-20 years out of date and are easily hacked, this should be done if nothing else to maybe modernize the system more.