VM-06—Application Penetration Testing
>Control Description
Organization conducts penetration tests periodically.
Theme
Process
Type
Detective
Policy/Standard
Vulnerability Management Policy>Implementation Guidance
1. Ensure that a process has been defined and documented for conducting penetration tests. 2. Ensure the results of the penetration tests are appropriately documented and tracked till remediation.
>Testing Procedure
1. Inspect and validate whether a process has been defined and documented for conducting penetration tests. 2. Validate the results of last penetration test and verify whether the findings were tracked till remediation.
>Audit Artifacts
E-VM-01
E-VM-08
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.