Security Testing Frameworks

  • OSSTMM (Open Source Security Testing Methodology Manual): Focuses on telecommunications, wired networks, and wireless networks.
  • OWASP (Open Web Application Security Project): Focuses on web application security.
  • NIST Cybersecurity Framework 1.1: Focuses on critical infrastructure security.
  • NCSC CAF (Cyber Assessment Framework): Covers data security, system security, identity and access control, resiliency, monitoring, and response/recovery planning.