Requirement
The cybersecurity requirements for penetration testing processes must be implemented.
Control Implementation Guidelines
- Implement all cybersecurity requirements to the organization's approved penetration testing. It is also recommended that the penetration testing cover the following, but not limited to:
- Perform penetration testing periodically
- Determine the scope of the penetration testing in the organization
Expected Deliverables
- Action plan for penetration testing
- Penetration Testing Reports
