5 OUTCOME- AND INTELLIGENCE-LED PENETRATION TESTING
Jason Charalambous and Moinuddin Zaki
In this chapter we discuss outcome-led penetration testing and intelligence-led penetration testing.
Outcome-led penetration testing relies first on set objectives and outcomes which drive how a penetration test should be carried out, in order to satisfy these objectives.
Intelligence-led penetration testing relies upon contextualised intelligence which defines the attack vectors of an organisation and allows the penetration tests to be positioned from the right angle. The benefit of this is that it provides a structured and effective approach for an organisation to mitigate its actual risks based on its attack vectors and the associated threat landscape ...