CISSP-ISSMP: Information Systems Security Management Professional

Reconnaissance and data gathering are conducted before active exploitation to identify targets, technologies, potential entry points, and relevant environmental details. They are part of the pre-attack phase.