This standard describes approaches to delivering comprehensive security testing (using a range of attack types) to support security and risk compliance monitoring.
It supplements National Community Security Policy Information Assurance core standard.