Date: 26th July 2017 Follow Hashtag: #SKC100DaysofLearning Topic: Security Testing Webinar Notes: Create a custom security strategy for your organisation by PluralSight Access the Risk: STRIDE DREAD Third Party Assessments Prioritize the Risk: 1. Penetration and Vulnerability OWASP 2. Indepedent Certification 3. Training & Awareness Basic training is important for members in organisation. Basic security courses needs to be provided to team members as awareness. 4. Focus As organisation, OPS Team should be developed as a team to focus only on security. And aligns with company culture, business strategy. [CSO - Chief Security Officer] Is your Executive team focus on security. Frameworks: ISO NIST ITIL TOGAF - Total Group Architecture Foundation SABSA Security Risk Score: Risk Management & Oversight Security Monitoring Threat & Vulnerability Management Security Controls This helps to focus on...