# Vulnerability Assessment

<figure><img src="https://3782755820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxiHgPDbj4maVZuaNWLtn%2Fuploads%2FrRbZYSOsAQKefBxreIlP%2Fimage.png?alt=media&#x26;token=90c1727d-4163-488c-a8d6-db22796d7700" alt=""><figcaption></figcaption></figure>

### Assessment Standards

* [Payment Card Industry Data Security Standard (PCI DSS)](https://www.pcisecuritystandards.org/pci_security/)
* [Health Insurance Portability and Accountability Act (HIPAA)](https://www.hipaa.com/)
* [Federal Information Security Management Act (FISMA)](https://www.cisa.gov/federal-information-security-modernization-act)
* [ISO 27001](https://www.iso.org/isoiec-27001-information-security.html)

### Penetration Testing Standards

* [Penetration Testing Execution Standard (PTES)](http://www.pentest-standard.org/index.php/Main_Page)
* [Open Source Security Testing Methodology Manual (OSSTMM)](https://www.isecom.org/OSSTMM.3.pdf)
* [National Institute of Standards and Technology (NIST)](https://www.nist.gov/cyberframework)
* [Open Web Application Security Project (OWASP)](https://owasp.org/)
  * [Web Security Testing Guide (WSTG)](https://owasp.org/www-project-web-security-testing-guide/)
  * [Mobile Security Testing Guide (MSTG)](https://owasp.org/www-project-mobile-security-testing-guide/)
  * [Firmware Security Testing Methodology](https://github.com/scriptingxss/owasp-fstm)
