Chapter 4Step 4: Frequent Security Testing

The key to properly securing your network and your organization's data is to find security vulnerabilities and remedy them. This isn't something you should just do once. Security testing and subsequent security hardening must be done on a regular basis. Not only is the cyber threat landscape constantly evolving, but your data, your network, and your computing devices are also constantly evolving. Each little bit of change can introduce a new vulnerability. You must be proactive, constant, and vigilant when it comes to the cybersecurity of your business and its precious data assets.

The problem is that a lot of companies find security testing overwhelming. This applies to businesses of all sizes and in all industries. They often don't know where to start. Sometimes IT specialists also struggle to convince the suits in their companies to spend money on security testing. This is what I hear from the cybersecurity testing professionals I speak with every day.

I'm here to help. In this chapter, I'll explain what security testing is, what the different types of security testing are, and what kind of security testing your company needs and why, and I'll offer tips for starting a proper security testing program in your organization.

What Is Security Testing?

Security testing involves all the different ways your organization can discover security vulnerabilities in your network. Vulnerabilities are exploited by cybercriminals, and sometimes ...

Get 8 Steps to Better Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.