Vulnerabilities are part of the life cycle of the modern information system. Software and hardware are rushed to market with often inadequate testing, resulting in an organizational information system that is a patchwork of potentially highly vulnerable systems. It is important for the information security professional to understand that vulnerabilities in information systems are a fact of life that is not going away anytime soon. The key to protecting the modern information system is continued vigilance through continuous technical testing.
In this chapter, you will learn:
- Technical testing categories at your disposal
- Testing integration into the SDLC
- Continuous monitoring considerations
- Vulnerability assessment considerations
- Penetration testing considerations
