Penetration Testing

The BCS-CREST penetration testing working group are all penetration testing experts from across the security industry. From penetration testers and consultants, to university lecturers specialising in information security, to information security managers, they all have insight to share on preparing, carrying out, and responding to penetration testing.

• What is penetration testing?Successful penetration testing: an overviewRegulatory management for penetration testingEmbedding penetration testing within organisational security policies and proceduresOutcome-led and intelligence-led penetration testingScoping a penetration testPenetration test coverage and simulating the threatBuilding organisational capability for penetration testingCommissioning penetration tests Selecting tools for penetration testingGood practice for penetration testingRole and coverage of reportingInterpretation and application of report outcomesActing on penetration test results

"This is the first time I’ve encountered a book which manages to combine properly researched good practice for penetration testing with the real requirements of the business community...The authors really know their stuff and I found myself nodding and smiling many times in every chapter. The case studies and examples are pithy and highly relevant. Concepts such as red teaming and intelligence-led penetration testing are clearly explained and contrasted with other forms of testing, helping demystify this complex topic. Each chapter is well laid out and the guidance provided is exactly what managers need to know to get great value from security testing exercises of all types. Over a dozen expert authors have contributed to this book and the results speak for themselves – this is a must read for those responsible for information security in organisations of all sizes."