Domain 6 - Security Assessment and Testing

Question 1

Security Assessments

Answer 1

Comprehensive reviews of the security of a system, application, or other tested environment

Question 2

Security Audits

Answer 2

Many of the same techniques as security assessment but must be performed by independent auditors (who may still be internal, external, or third party)

Question 3

Security Testing

Answer 3

Verify that a control is functioning properly; automated scans; as well as manual attempts to undermine security

Question 4

NIST SP 800-53A

Answer 4

Describes best practices in conducting security and privacy assessments