REFERENCES
This is a partial list of references that a penetration tester may wish to review as a part of their development:
• ISO/IEC 27001:2005 – Information technology – Security techniques – Information security management systems – Requirements
• ISO/IEC 27002:2005 – Information technology – Security techniques – Code of practice for information security management
• ISO/IEC 27005:2011 – Information technology – Security techniques – Information security risk management
• ISO/IEC 31000:2009 – Risk management – Principles and guidelines
• ISO/IEC 20000-1:2011 – Information technology – Service management – Part 1: Service management system requirements
• NIST SP 800-115 – Technical Guide to Information Security Testing and Assessment ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access