NIST publication
Technical Guide to Information Security Testing and Assessment
Scarfone, Karen, et al. Technical Guide to Information Security Testing and Assessment. National Institute of
Standards and Technology, Sept. 2008. NIST Special Publication 800-115.
Open the NIST publication
Used to support the site's explanation of testing as a planned, methodical process that includes preparation, analysis,
and mitigation.
NIST news article
NIST Drafts Major Update to Its Widely Used Cybersecurity Framework
National Institute of Standards and Technology. "NIST Drafts Major Update to Its Widely Used Cybersecurity Framework."
NIST, 8 Aug. 2023,
https://www.nist.gov/news-events/news/2023/08/nist-drafts-major-update-its-widely-used-cybersecurity-framework.
Used to support the site's emphasis on cybersecurity as organizational risk and on communication between technical staff
and leadership.