Swiss testing, inspection and certification company SGS buys U.S.-based information security assessment provider Penumbra Security.