Test Frameworks

OPEN SOURCE SECURITY TESTING METHODOLOGY MANUAL (OSTMM)

NIST

NIST Compliance at a Glance

1. Categorize the data and information you need to protect
2. Develop a baseline for the minimum controls required to protect that information
3. Conduct risk assessments to refine your baseline controls
4. Document your baseline controls in a written security plan
5. Roll out security controls to your information systems
6. Once implemented, monitor performance to measure the efficacy of security controls
7. Determine agency-level risk based on your assessment of security controls
8. Authorize the information system for processing
9. Authorize the information system for processing

OPEN WEB APPLICATION SECURITY PROJECT (OWASP)