This is a development site. Visit SFIA

Skip to content. | Skip to navigation

Personal tools

Reference and guide to SFIA version 8. Framework status: Development. Show revision-marked text

Penetration testing: Level 6


Takes a comprehensive approach to seeking vulnerabilities across the full spectrum of organisation policies, processes, and defences in order to improve organisational readiness, improve training for defensive practitioners, and inspect current performance levels. Determines testing policy, and owns the supporting processes. Takes responsibility for the management of all vulnerability testing activities within the organisation. Assesses and advises on the practicality of testing process alternatives. Initiates improvements to test processes and directs their implementation. Assesses suppliers' development and testing capabilities. Manages client relationships with respect to all testing matters.

Change requests

There are no change requests here