ISTQB Advanced Security Tester
4-Days

Pre-Requisites

• A Certificate at ISTQB Foundation level must have been awarded for candidates to sit this course
• It is recommended that candidates have at least three-years testing experience before attempting the course and exam. 

Exam

To qualify as an internationally-recognized Certified Advanced Level Security Tester and be issued with an ISTQB® Advanced Level Certificate, delegates must successfully pass the exam administered by the relevant National Board or Examination Provider.

The 2-hour exam contains 45 questions, of which 60% must be answered correctly for a pass to and certificate to be awarded.
If English is not your first language, please advise us so that we can apply for an additional 30-minutes of exam time for you.

Topics

 Module 1 - The Basis of Security Testing

• Security Risks
• Information Security Policies and Procedures
• Security Auditing and Its Role in Security Testing.
• Security Testing Approaches
• Improving the Security Testing Practices
• ISTQB Advanced Security Tester Certification Course.

Module 2 - Security Testing Purposes, Goals and Strategies

• Introduction
• The Purpose of Security Testing
• The Organizational Context
• Security Testing Objectives
• The Scope and Coverage of Security Testing Objectives.

Module 3 - Security Testing Processes

• Security Test Process Definition
• Security Test Planning
• Security Test Design
• Security Test Execution
• Security Test Evaluation
• Security Test Maintenance.

Module 4 - Security Testing Throughout the Software Lifecycle

• Role of Security Testing in a Software Lifecycle
• The Role of Security Testing in Requirements
• The Role of Security Testing in Design
• The Role of Security Testing in Implementation Activities
• The Role of Security Testing in System and Acceptance Test Activities
• The Role of Security Testing in Maintenance.

Module 5 - Testing Security Mechanisms

• System Hardening
• Authentication and Authorization
• Encryption
• Firewalls and Network Zones
• Intrusion Detection
• Malware Scanning
• Data Obfuscation
• Training.

Module 6 - Human Factors in Security Testing

• Understanding the Attackers
• Social Engineering
• Security Awareness.

Module 7 - Security Test Evaluation and Reporting

• Security Test Evaluation
• Security Test Reporting.

Module 8 - Security Testing Tools

• Types and Purposes of Security Testing Tools
• Tool Selection.

Module 9 - Standards and Industry Trends

• Understanding Security Testing Standards
• Applying Security Standards
• Industry Trends.

Dates For ISTQB Advanced Security Tester

VIRTUAL training

• 16-19 December 2024

To book any of these dates, please see below.