Penetration Tests Are The Check Engine Light On Your Security Operations

White Paper
Describes a set of controls organizations should implement before performing penetration testing, offers pointers, and outlines next steps.
Publisher

Software Engineering Institute

Abstract

Penetration testing is a way of testing your security controls against realistic attacks. However, it assumes that you have a known set of controls to test. Just as you wouldn't build a vehicle maintenance plan based on the check engine light alone, it's suboptimal to start improving network security operations with a penetration test.