Security testing best practices: Open Source Security Testing Methodology Manual
The
OSSTMM project provides an entire testing framework for multiple security areas of the enterprise, including physical security, information security, and even controls for preventing fraud and social engineering attacks. It offers testing templates, intense community support, and a first rate architect in Pete Herzog.
