CIS Critical Security Control 18: Penetration Testing
Welcome to our course series on CIS Top 18 Critical Security Controls v8. In this course covering control 18: Penetration Testing, you'll learn how to train teams to establish the importance of a penetration testing program. Plus, gain insights on the recommended frequency, types, and scope of penetration testing.
Already have an account? Sign In »

Module 1: Course Overview and Introduction to the Critical CIS Controls
Module 2: Penetration Testing
2.3Perform Periodic External Penetration Tests
Module 3: CIS 18 Course Review and What's Next
These security controls can be combined with frameworks, like NIST SP 800-37 (The NIST Risk Management Framework-RMF) to provide organizations with defense-in-depth best practices.
This course may help prepare students for industry certifications around the CIS Security Controls.The course will cover an overview of each control, map the controls to the NIST Cybersecurity Framework, and students will gain hands-on practice through labs in this course.
Prerequisites
This course is designed for IT security professionals who want to expand their knowledge and skills in the area of development and implementation of security controls. Prerequisites include an existing knowledge of networking and knowledge of their organization’s security requirements.
Course Goals
By the end of this course, students should be able to:
- Explain the concept of security controls
- Enumerate the eighteen (18) areas of critical security controls
- Implement technical security controls related to these areas

Corey Holzer
Information Systems Engineer


Complete this entire course to earn a CIS Critical Security Control 18: Penetration Testing Certificate of Completion
Competency Areas