CISSP-ISSMP: Information Systems Security Management Professional

Penetration testing emulates a threat source’s attempts to circumvent security protections, revealing weaknesses and potential failures in an IT system’s protective schemes. NIST describes its objective as testing the IT system from a threat-source viewpoint and identifying potential failures in system protection schemes.