Tenable

Tenable is a cybersecurity software company that specialises in vulnerability management and cyber risk management solutions. It was founded in 2002, initially gaining prominence with Nessus, an open-source vulnerability scanner designed to identify security weaknesses in networks, systems, and applications. Since then, Tenable has expanded its products to covver cyber risk, compliance monitoring, threat intelligence, and attack surface management. Tenable’s solutions are widely used across a range of industries, including finance, healthcare, government, and technology, with clients ranging from small businesses to large enterprises. ...

1 min

Testing strategy - notes

Key elements Types of testing Unit Integration System End-to-end (e2e) User Acceptance Testing (UAT) Non-functional - testing for objectives like performance of the system (speed, capacity), security, accessibility What gets testing / timeline Critical processes / critical flows, eg. authenticating, that transactions work as expected Prioritise high-risk or high-importance features early, allow time to fix defects Ownership of testing Developers - unit & integration tests QA teams - end to end & non-functional tests Business - UAT Tools Frameworks JUnit Cypress Automated testing with Postman CI/CD GitHub Actions Jenkins Azure DevOps Results dashboards & alerts Environments Dev, Test, Staging, Pre-Prod, Prod Test data strategy Quality Gates Release only if/when tests pass (agree coverage %, what is critical path) Risk-based testing: focus effort Metrics & Governance testing coverage defect leakage test pass rate regression testing (Youtube) Align with SDLC & audit/compliance needs

1 min

The Chief Risk Officer (CRO) role

Related pages CISO BISO

1 min

The CISO role

The Chief Information Security Officer (CISO) role is typically the most senior information security position. Related pages BISO CRO

1 min

The EU Artificial Intelligence (AI) Act

The EU AI Act, proposed in April 2021 and expected to be enforced starting in 2025, is a comprehensive regulatory framework that establishes rules for the development, use, and governance of artificial intelligence in the European Union, emphasizing risk-based oversight and ethical AI practices. Further reading The EU AI Act: The impact on financial services institutions (Consultancy.eu) The EU AI Act Newsletter EU AI Act (Future of Life Institute) EU AI Act: first regulation on artificial intelligence (European Parliament) AI Act (European Commission)

1 min