thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Open Source Security Testing Methodology Manual (OSSTMM)

A peer-reviewed security testing methodology from ISECOM focused on measurable, repeatable operational security testing.

Definition

OSSTMM covers testing of human, physical, wireless, telecommunications and data network channels. It emphasizes scientific, metric-based results, including the Risk Assessment Value (RAV) to quantify attack surface. It is maintained by ISECOM.

Example

A tester uses OSSTMM to evaluate the physical and human security channels of a data center alongside its networks.

Exam tip

OSSTMM is associated with ISECOM and metric-driven results; PTES with seven engagement phases; NIST 800-115 with government technical testing guidance.

Related terms