+OPS.1.1.6.A14 Performing Penetration Tests [Tester] (H)

OPS.1.1.6.A14 Performing Penetration Tests [Tester] (H)

Penetration tests SHOULD be performed on applications and/or IT systems with increased protection needs. A concept for penetration tests SHOULD be created. In addition to the deployed test methods, the concept for penetration tests SHOULD document corresponding success criteria.

Penetration tests SHOULD be performed in accordance with the framework conditions of the penetration test concept. The vulnerabilities detected during penetration tests SHOULD be classified and documented.

1. Overview

Summary Standard

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements
Source Requirement

3. Related Regulations

Regulations
Source Regulation

Linked Issues