CISSP: Certified Information Systems Security Professional

Log reviews, synthetic transactions, and code reviews provide evidence that security safeguards are implemented and operating as expected, so they are forms of security control testing. NIST security assessment guidance recognizes testing and examination techniques as ways to assess security controls and their effectiveness.