Vulnerability Assessment

Assessment Standards

• Payment Card Industry Data Security Standard (PCI DSS)

• Health Insurance Portability and Accountability Act (HIPAA)

• Federal Information Security Management Act (FISMA)

• ISO 27001

Penetration Testing Standards

• Penetration Testing Execution Standard (PTES)

• Open Source Security Testing Methodology Manual (OSSTMM)

• National Institute of Standards and Technology (NIST)

• Open Web Application Security Project (OWASP)

  • Web Security Testing Guide (WSTG)

  • Mobile Security Testing Guide (MSTG)

  • Firmware Security Testing Methodology