Penetration Testing
What is Penetration Testing?
An authorised simulated cyberattack against a system to evaluate its security. Identifies vulnerabilities that could be exploited by real attackers.
Related terms
Frameworks that govern penetration testing
What the standards actually require on penetration testing
Requirements naming penetration testing across 6 standards, quoted from the control text.
The provider must confirm with a penetration test, at least once every six months, that the logical separation controls isolating customer environments are effective.
pci-dss-4-0::A1.1.4 · A1.1.4 Penetration testing of tenant separation every six months →Employ an independent penetration testing agent or team to perform penetration testing on the system or system components.
NIST800-CA-8(1) · CA-8(1) Penetration Testing | Independent Penetration Testing Agent or Team →Cybersecurity requirements for penetration testing are identified, documented and approved.
saudi-nca-ecc::2-11-1 · 2-11-1 Penetration testing requirements defined →Penetration Testing. Penetration testing tools are used internally so testing scales beyond periodic external engagements.
PT1.3 · Use penetration testing tools internally →Conduct external penetration testing of a scope sufficient to satisfy the scope requirement, at a frequency determined by an appropriate risk analysis and no less frequently than annually for covered entities, with the required annual test performed by indepen...
CFTC-SS-14 · External Penetration Testing →Carry out penetration testing of applications. For critical applications, authenticated penetration testing uncovers business logic flaws more effectively than automated security testing or scanning of code.
CIS-16.13 · Conduct Application Penetration Testing →Questions people ask about penetration testing
What is Penetration Testing?
Why is Penetration Testing important for compliance?
What concepts are related to Penetration Testing?
Which compliance frameworks address Penetration Testing?
Where can I learn more about Penetration Testing?
See how Penetration Testing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.