The OSSTMM (Open Source Security Testing Methodology Manual) is a framework for conducting comprehensive security audits. This methodology emphasizes testing the actual security of operational processes, not just theoretical configurations, and is designed to be objective and unbiased. It uses a unique approach to assess security based on the attack surface, which considers the balance between controls, limitations, and porosity. The framework also analyzes trust in relationships and interactions, providing tools to make more informed trust decisions. The OSSTMM is openly licensed and encourages collaboration and community contributions to improve the methodology and ensure its continuous evolution.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cyber_security_summary