Security Assessment, Testing, and Audits

Introduction

This lesson covers all of Domain 6, Security Assessment and Testing (12% of the exam, ISC2 exam outline effective 15 April 2024): design and validate assessment, test, and audit strategies (6.1); conduct security control testing (6.2); collect security process data (6.3); analyze test output and generate reports (6.4); and conduct or facilitate security audits (6.5).