Which of the following standards does NOT follow the commonly used methodologies in penetration testing?

The penetration testers are required to follow predefined standard frameworks in making penetration testing reporting formats.

Which of the following standards does NOT follow the commonly used methodologies in penetration testing?
A . National Institute of Standards and Technology (NIST)
B . Information Systems Security Assessment Framework (ISSAF)
C . Open Web Application Security Project (OWASP)
D . American Society for Testing Materials (ASTM)

View Answer

Answer: D