Network Security Assessment: From Vulnerability to Patch

Chapter 10. Regulatory Compliance

Solutions in this chapter

• Regulating Assessments and Pen Tests

• Drafting an Information Security Program

  	Summary
  	Solutions Fast Track
  	Frequently Asked Questions

Introduction

Vulnerability assessments (VAs) and penetration tests (pen tests) have long been major components of information security programs. In fact, security managers have historically defined when and how they would conduct these exercises, as well as the scope ...