This document should be useful for security program managers, technical and functional managers, network and system administrators, and other information technology (IT) staff members. It provides them with a structured approach to network security testing. Management personnel who are responsible for systems can apply the testing procedures and tools discussed in this document to become informed about the status of the assets under their stewardship. This document can also assist in evaluating compliance with their organization’s security standards and requirements. Managers can also use this information to evaluate the technical basis and support for the decision-making processes. .
