Network Vulnerability Assessment

Security testing

The primary objective of security tests is to ensure that a control is functioning properly. The tests could be a combination of automated scans, penetration tests using tools, and manual attempts to reveal security flaws. It's important to note that security testing isn't a one-time activity and should be performed at regular intervals. When planning for testing of security controls, the following factors should be considered:

• Resources (hardware, software, and skilled manpower) available for security testing
• Criticality rating for the systems and applications protected by the controls
• The probability of a technical failure of the mechanism implementing the control
• The probability of a misconfiguration of a control that ...