Warto zaznajomić się z materiałami na poniższych stronach stronach…

SANS Information Security Training | Cyber Certifications | Research - https://www.sans.org
CIS Benchmarks - Center for Internet Security - https://www.cisecurity.org/cis-benchmarks
PTES - http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines
OWASP - https://www.owasp.org
NIST Computer Security Resource Center | CSRC - https://csrc.nist.gov
OSSTMM - Open Source Security Testing Methodology Manual - http://www.isecom.org/research/