Security assessment is the process of identifying, implementing, and managing various security tools and techniques. This chapter will help us to evaluate the organization's information security policies and practices and determine risks associated with the information system by understanding different attack methods and techniques.
The following topics will be covered in this chapter:
- Security awareness training and programs
- Information system attack methods and techniques
- Security testing tools and techniques
- Security monitoring tools and techniques
- Incident response management
- Evidence collection and forensics
