Critical Security Controls for Effective Cyber Defense: A Comprehensive Guide to CIS 18 Controls

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2024

D. J. EdwardsCritical Security Controls for Effective Cyber Defensehttps://doi.org/10.1007/979-8-8688-0506-6_18

18. Penetration Testing

Dr. Jason Edwards¹  

(1)

New Braunfels, TX, USA

 

Penetration testing, often abbreviated as pen testing, is a critical component of a comprehensive cybersecurity strategy. This process involves evaluating the security of an organization’s IT infrastructure by simulating attacks from malicious outsiders and insiders. The objective is to identify and exploit system weaknesses, clearly showing the organization’s defensive posture. Unlike routine security assessments, penetration testing delves deeper, aiming to mimic the strategies ...