September 2026
Intermediate
696 pages
17h 43m
English
This chapter explores the concepts associated with audit and assessment activities within cybersecurity. Effective audits and assessments help organizations evaluate the strength of their security controls, identify areas for improvement, and demonstrate compliance with regulatory and industry requirements. The chapter examines key data-gathering techniques such as sampling, questionnaires, surveys, interviews, and assertions, as well as the use of reference sources including MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis. It also covers scoping activities, audit charters, assessment frequency, engagement types, penetration testing approaches, ...
Read now
Unlock full access