ISTQB Virtual Advanced Security Tester Training
The Advanced Security Tester course, created by Rex Black, past President of the International Software Testing Qualifications Board (ISTQB), past President of the American Software Testing Qualifications Board (ASTQB) and co-author of the International Software Testing Qualifications Board Advanced Syllabus, provides test engineers with advanced skills in security test analysis, design, and execution through direct instruction and group exercises.
This hands-on course provides test engineers with the ability to define and carry out the tasks required to put the strategy into action and is ideal for testers and test teams preparing for certification. In preparation for the exam, participants will key concepts related to security threats, risks, policies and procedures, and how to address those through testing processes integrated into the software lifecycle.
The objectives for the course are as follows:
- Plan, perform and evaluate security tests from a variety of perspectives – policy-based, risk-based, standards-based, requirements-based and vulnerability-based.
- Align security test activities with project lifecycle activities.
- Analyze the effective use of risk assessment techniques in a given situation to identify current and future security threats and assess their severity levels.
- Evaluate the existing security test suite and identify any additional security tests.
- Analyze a given set of security policies and procedures, along with security test results, to determine effectiveness.
- For a given project scenario, identify security test objectives based on functionality, technology attributes and known vulnerabilities.
- Analyze a given situation and determine which security testing approaches are most likely to succeed in that situation.
- Identify areas where additional or enhanced security testing may be needed.
- Evaluate effectiveness of security mechanisms.
- Help the organization build information security awareness.
- Demonstrate the attacker mentality by discovering key information about a target, performing actions on a test application in a protected environment that a malicious person would perform, and understand how evidence of the attack could be deleted.
- Analyze a given interim security test status report to determine the level of accuracy, understandability, and stakeholder appropriateness.
- Analyze and document security test needs to be addressed by one or more tools.
- Analyze and select candidate security test tools for a given tool search based on specified needs.
- Understand the benefits of using security testing standards and where to find them.
Attendees attend the virtual classroom via Zoom. Sessions start at 11:00 am Central and end at 5:00 pm Central. A recorded session is made available to attendees within 48 hours. Purchase of course tuition includes:
- Instructor-led three-day course
- A set of approximately 300 PowerPoint slides covering the topics to be addressed
- NEW!! A downloadable copy of the complete note set. Download the materials to a PC or mobile device. There is no expiration date on access to this valuable resource as they will be downloadable. Digital rights management and intellectual property rights are protected by some limitations such as the inability to share the file with others. Further, while the materials can be printed, each page includes a prominent watermark, with the exception of the pages in the ISTQB Syllabus and Glossary.
- Foundation Sample Exam Questions and Foundation Level mock exam to provide a review of the Foundation Level exam
- ISTQB Advanced Level Syllabus Security Tester
- The latest glossary of terms used in Software Testing produced by members of the ISTQB
- Advanced Security Tester Sample Exam Questions embedded throughout course. A complete set of questions for every learning objective in the Security Tester module of the ISTQB Advanced Syllabus.
- Advanced Security Tester Mock Exam
- Project Source Documents for Course Exercises
- Add-on option of printed copies of written course materials
- An electronic exam voucher valid for one year is priced separately and is available as an optional purchase using the pulldown menu on this page.
- All individuals sitting for the Advanced Level exams must have successfully completed the Foundation Level Certification and sufficient practical experience. Proof of eligibility is available from the American Software Testing Qualifications Board and is required to take an Advanced exam
- Course completion certificate (often used for employer reimbursement)
Remote-proctored exams – In response to Covid-19 and the necessity to social distance, the ISTQB Certified Tester exams can be taken online at home via a remote-proctor.
An electronic exam voucher is priced separately and is available as an optional purchase using the pulldown menu on this page. With the ASTQB Advanced Level exams, a second exam attempt is included provided that the examinee received their Foundation Level certification via an ASTQB or AT*SQA exam and had the first attempt by December 31, 2021. The second attempt must be made within 4 months of the first. For all iSQI exam levels, an exam can be purchased with a single exam attempt only or a 2TRY exam can be purchased allowing for a second attempt regardless of the exam used for the Foundation Level certification. The second attempt must be made within 90 days of the first.
Once the exam voucher has been issued, it is not refundable.
A optional supplemental textbook, “CompTIA Security+ All-in-One Exam Guide, Fifth Edition (Exam SY0-501”, can be purchased separately.
Accreditation by ASTQB July 2017. This course follows the ISTQB Advanced Level Syllabus Security Tester 2016.
There are no cancellations or registration transfers to another date within 30 days prior to the start of the course. You will be held responsible for 100% of the tuition if you cancel your registration within that time period. If the course is canceled by RBCS you will received a 100% refund or, upon your request, your tuition can be moved to another course.
Blended e-learning, licenses and volume discounts are also available for companies.