Web applications: How Penetration Tests can improve your Risk Assessment
379 views · Published 10 March 2016 · 28:09 · Indexed 6 November 2026
Channel: PECB · 2016 · Education
Organizer: Gezim Zeneli, PECB - https://www.pecb.com/ Presenter: Friedhelm Düsterhöft Nowadays, conducting a periodic penetration tests has become a regulatory requirement for many companies. There is already an extensive literature on pentest methodology and a huge variety of powerful tools to facilitate pentesting. However, little has been published so far regarding the implementation of a pentesting program as part of an ISMS. This webinar strives to shed some light on questions like: - How successful are pentesters in discovering vulnerabilities? - What is the best pentesting method? - How many pentesters do I need? - How to rate the skill level of a pentester? - What implication do the corresponding answers have to our risk assessment? This webinar was presented by Friedhelm Düsterhöft, Managing Director of msdd.neT GmbH offering IT Security consultancy and training services for international companies from the IT-, telecommunications- and financial industry. He has specialized in GRC topics around ISO 27001 and also has long-term experience in vulnerability management and penetration testing. Slides of the webinar: http://bit.ly/1P1eMMO
More from this channel
-
50:24
The Importance of Business Impact Analysis ISO 22317
-
49:37
ISO 50001 Managing Risk within the Energy Management Value Chain
-
37:46
ISO 21500 Generating business value through strong project management
-
42:14
PECB ISO 29001:2010 Awareness Webinar
-
35:57
Corruption and Fraud Risk Management using ISO 31000
-
1:11:09
What happens when you actually hit the ground ! Implementing SMS real life issues
-
52:13
Corporate Governance of IT Implementation Based on ISO IEC 38500 and COBIT5
-
31:37
ISO 9001:2015 at the stage of Draft International Standard DIS 2014