ISTQB CT-SEC is an advanced security testing certification for people with some experience in security testing who want to deepen their expertise. It covers planning, performing, and evaluating security tests from risk, requirements, vulnerability, and human factors perspectives, along with security testing tools and standards. Candidates are expected to hold the ISTQB Foundation Level certificate and have relevant practical, academic, or consulting experience. Passing demonstrates the ability to align security test activities with the software lifecycle and assess security threats and test coverage in context.
Exam Topics
- The Basis of Security Testing13%
- Security Testing Processes18%
- Security Testing Throughout the Software Lifecycle29%
- Testing Security Mechanisms31%
- Human Factors in Security Testing13%
- Security Test Evaluation and Reporting9%
- Security Testing Tools7%
- Standards and Industry Trends5%
How to Use This Practice Exam
- Browse — Read each question, select your answer, and reveal the explanation.
- Exam Mode — Simulate real exam conditions with a timed session and score report.
- Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.
Last updated May 2, 2026 at 11:21 PM
