ISTQB Certified Tester Security Tester (CT-SEC) (TSG_TS)

Module 1 – The Basis of Security Testing

• • Security Risks
• • Information Security Policies and Procedures
• • Security Auditing and Its Role in Security Testing.

Module 2 – Security Testing Purposes, Goals and Strategies

• • Introduction
• • The Purpose of Security Testing
• • The Organizational Context
• • Security Testing Objectives
• • The Scope and Coverage of Security Testing Objectives.

• • Security Testing Approaches
• • Improving the Security Testing Practices
• • ISTQB Advanced Security Tester Certification Course.

Module 3 – Security Testing Processes

• • Security Test Process Definition
• • Security Test Planning
• • Security Test Design
• • Security Test Execution
• • Security Test Evaluation
• • Security Test Maintenance.

Module 4 – Security Testing Throughout the Software Lifecycle

• • Role of Security Testing in a Software Lifecycle
• • The Role of Security Testing in Requirements
• • The Role of Security Testing in Design
• • The Role of Security Testing in Implementation Activities
• • The Role of Security Testing in System and Acceptance Test Activities
• • The Role of Security Testing in Maintenance.

Module 5 – Testing Security Mechanisms

• • System Hardening
• • Authentication and Authorization
• • Encryption
• • Firewalls and Network Zones
• • Intrusion Detection
• • Malware Scanning
• • Data Obfuscation
• • Training.

Module 6 – Human Factors in Security Testing

• • Understanding the Attackers
• • Social Engineering
• • Security Awareness.

Module 7 – Security Test Evaluation and Reporting

• • Security Test Evaluation
• • Security Test Reporting.

Module 8 – Security Testing Tools

• • Types and Purposes of Security Testing Tools
• • Tool Selection.

Module 9 – Standards and Industry Trends

• • Understanding Security Testing Standards
• • Applying Security Standards
• • Industry Trends.