ISTQB® Certified Tester Security Tester (CT-SEC)

The Security Testing Curriculum empowers professionals to plan, conduct, and evaluate security tests from multiple perspectives: risk, requirements, vulnerabilities, and human factors. It also addresses security testing tools and standards. Ideal for testers, QA specialists, and developers seeking expertise in software security.

The components of the Certified Tester - Security Tester are:

• Fundamentals of security testing and organizational context
• Risk-driven test planning and analysis
• Security test design, execution, evaluation, and maintenance
• Security throughout the SDLC
• Testing security controls: hardening, authentication/authorization, encryption, firewalls, intrusion detection, malware scanning, data obfuscation
• Human aspects: social engineering, attacker perspectives, security awareness
• Security test reporting and result evaluation
• Security testing tools and standards, including tool selection and industry trends

Prerequisites

• Must hold the ISTQB® Foundation Level (CT‑FL) certification
• Must have ≥ 3 years of experience in academic, practical, or consulting roles related to testing (including security)

Exam Highlights

• Questions: 45 multiple-choice
• Duration: 120 minutes (+ 25% extra for non-native speakers = 150 minutes)
• Passing Score: 65% (minimum 52/80 points)

Exam Preparation

• ISTQB CT‑SEC Syllabus v1.0 (2016) ⤴
• ISTQB CT‑SEC Sample Exam A – Questions v1.1 ⤴
• ISTQB CT‑SEC Sample Exam A – Answers v1.1 ⤴