Review of the major Security Assessment and Testing topics to guide your studies, and help you pass the CISSP exam.

This MindMap review covers:
00:00 Introduction
00:33 Security Assessment and Testing
01:35 Validation
01:50 Verification
02:00 Rigour
02:22 Testing a System
02:32 Unit
02:52 Interface
03:03 Integration
03:13 System
03:22 Testing Techniques
03:32 Methods & Tools
03:36 Manual
03:43 Automated
03:50 Runtime
03:55 Static
04:00 Dynamic
04:05 Fuzz
04:25 Mutation
04:42 Generation
05:08 Access to Code
05:15 White
05:19 Black
05:27 Techniques
05:32 Positive
05:44 Negative
06:01 Misuse
06:08 Decision table analysis
06:35 State-based analysis
06:43 Efficiency
06:54 Boundary Value Analysis
07:16 Equivalence Partitioning
07:53 Operational
07:58 Real User Monitoring
08:08 Synthetic Performance Monitoring
08:24 Regression Testing
08:34 Testers / Assessors
08:36 Internal
08:40 External
08:54 Third-Party
09:02 SOC 1
09:18 SOC 2
09:35 Type 1
09:50 Type 2
10:09 SOC 3
10:30 Roles
10:32 Executive Management
10:38 Audit Committee
10:45 Security Officer
10:50 Compliance Manager
11:00 Internal Auditors
11:06 External Auditors
11:13 Metrics
11:17 Focus
11:38 KPIs
11:48 KRIs
12:11 Outro

For a full list of all the MindMaps and to download them in PDF and Audio format, visit: https://destcert.com/cissp-mindmaps/

Join our r/DestCert subreddit for valuable CISSP resources, training advice, support, and to connect with other CISSP professionals!