Testing, Verification, and Security Assessment
Testing is the process of using a system (or some of its components) in a scripted, controlled way to see if a specified set of inputs and initial conditions produce the required results.
2 slides · 1 min read · Domain 8
Testing is performed at many steps during systems development as a way of verifying correct design, correct implementation, and acceptability for use. Testing is also used to verify that the element being tested meets security-specific features, functions, or characteristics.
Repairs, maintenance actions, and updates are frequently required on almost all levels of systems elements, from the basic infrastructure of the IT architecture on up through operating systems, applications platforms, networks, and user interfaces. Such modifications need to be acceptance tested to verify that newly installed or repaired) functionality works as required.
They must also be regression tested to verify that the modifications did not introduce other erroneous or unexpected behaviors in the system.
Ongoing security assessment and evaluation testing evaluates whether the same system that passed acceptance testing still is secure in the face of today's evolved threat landscape.