Information Security Handbook - Second Edition

6

Continuous Testing and Monitoring

Vulnerabilities have become an inescapable part of the life cycle of modern information systems. Rapid software and hardware development and deployment often lead to inadequately tested products. This approach to technology development often results in an amalgamation of potentially vulnerable systems within an organization. Information security professionals must understand that these vulnerabilities are an inherent aspect of information systems that cannot be eliminated. Continuous vigilance through regular technical testing and monitoring is the key to safeguarding these systems.

Continuous testing and monitoring are essential practices in ensuring the security of an organization’s information systems. ...