These are planned attack simulations in order to foresee the damage that a malicious attacker from inside or outside the organization may cause to the systems and to take the necessary precautions for vulnerabilities.
It is done to raise the security skills of the institution to the highest levels, to detect all threats and take precautions and to prevent possible information loss.