Test and Verification -> Test-Intensity: High test intensity
Risk and Opportunity
Risk: A too small intensity or a too high confidence might lead to not visible vulnerabilities.
Opportunity: A deep scan with high test intensity and a low confidence threshold is performed.
Required knowledge: Medium (two disciplines)
Required time: Medium
Required resources (systems): Very High
OWASP SAMM 2 Mapping: v-security-testing|A|2
ISO27001:2017 Controls Mapping: