ISTQB Security Tester

Duration

ISTQB Specialist Level Security Tester Course is a three-day course, usually held in
the time period Friday - Sunday. Each training day starts at 9.00 and finishes at 18.00.

Location

Quality House is flexible and focuses on the needs of our clients. Public courses are housed in a hall provided by Quality House for the official dates in our Courses Calendar. Our company also organizes private courses for a single client, where both the dates and location are further negotiated. The client can suggest and provide a convenient location suited for their needs.

Accreditation

The ISTQB Specialist Level Security Tester Course meets International Software Testing Qualifications Board (ISTQB) requirements and has been accredited by South East European Testing Board (SEETB).

POTENTIAL JOB OPPORTUNITIES

Security Test Engineer, Penetration Test Engineer, DevOps

BRIEF INTRODUCTION

Nowadays, cybersecurity is a very important concern for every person and organization. With the constant news of cybersecurity breaches, it is now clear that more attention is needed in testing that security defenses are in place and are working as expected. Despite that, only a small percentage of companies perform security testing, and not only upon need - usually after a security breach, but in advance and on a continuous basis. Of course, one of the most prominent threats for IT companies is the leak of information, and yet, penetration testing is only a part of the security testing. There are also other security threats that should be approached - depicted, analyzed, prevented or minimized as a negative impact on the company. Looking just at what is happening definitely confirms that security testing is indeed needed in every organization. In 2017 some of the biggest hacks include:

Bell Canada – the largest telecom was attacked in May 2017. What happened – the company was exposed to a threat of a hacker that demanded a ransom (the number is not clear). The company declined to pay and the records of 1.8 million customers were released.
Edmodo - an educational platform with 77 million accounts. Was attacked in May from a hacker who put the database for sale on the dark web. The data included usernames, email addresses and hashed passwords.
Tesco Bank - early in 2017 a hacker stole 2.5 million pounds from 9000 online customers.

We can assure you that the ISTQB Specialist Level - Security Tester course aims at preparing the professionals to work on a specialist level in cybersecurity. To have the procedures, the preventive measures, and the post measures - to be able to prevent a breach from happening or, at least, to minimize the effect.

Target Audience

Testers wishing to expand their knowledge in Security Testing
Test Managers
Test Team Leaders
Development Managers
IT Directors
Project Managers
Others

Course Content

The Basis of Security Testing
Security Testing Purposes, Goals and Strategies
Security Testing Processes
Security Testing Throughout the Software Life Cycle
Testing Security Mechanism
Human Factors in Security Testing
Security Test Evaluation and Reporting
Security Testing Tools
Standards and Industry Trends

Course Benefits

Plan, perform and evaluate the security tests from a variety of perspectives
Evaluate an existing security test suite and identify any additional security tests needed
Analyze a given set of security policies and procedures, along with security test results, to determine the effectiveness
For a given project scenario, identify security test objectives based on functionality, technology attributes, and known vulnerabilities
Analyze a given situation and determine which security testing approaches are most likely to succeed in that situation
Identify areas where additional or enhanced security testing may be needed
Evaluate the effectiveness of the security mechanism
Help the organization build information security awareness
Demonstrate the attacker mentality by discovering key information about a target, performing actions on a test application in a protected environment that a malicious person would perform, and understand how evidence of the attack could be deleted
Analyze a given interim security test status report to determine the level of accuracy, understandability, and stakeholder appropriateness
Analyze and document security test needs to be addressed by one or more tools

Disclaimers

The Specialist Level Security Tester certification exam is comprised of 45 multiple choice questions, with a pass mark grade of 65% to be completed within 150 minutes for non – native speakers (two hours and a half). Each correct answer brings 1, 2 or 3 points.
To take the exam, you must score at least 52 points out of 80 (65%).
To take the exam, you should hold the ISTQB Foundation Level certificate and have at least 3 years of practical experience or as a consultant.
The exam administration and acquisition of the ISTQB certificates are managed by South East European Testing Board (SEETB), a trusted Quality House partner, resulting in a supplement fee.
The course requires a minimum number of participants. If the required group size is not reached, we will offer you the opportunity to reschedule for alternative dates or cancel if preferred.