Continuous Security Testing
Pen testing și vulnerability scanning regulate pentru identificarea și remedierea problemelor de securitate.
Testing Types
External Pen Test
Testing din perspectiva unui attacker extern.
QuarterlyInternal Pen Test
Testing din interiorul network-ului.
Bi-annualVulnerability Scan
Automated scanning pentru CVEs cunoscute.
WeeklyTesting Scope
In Scope
- ✓ Web application
- ✓ API endpoints
- ✓ SIP/VoIP infrastructure
- ✓ Authentication systems
- ✓ Cloud infrastructure
Methodologies
- • OWASP Top 10
- • PTES Standard
- • NIST Framework
- • CIS Benchmarks