Updated in May 2025.

This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this comprehensive course, you will explore the critical elements of security assessment and testing, aligned with the CISSP curriculum. The course begins with an introduction to designing and validating security tests and assessments, focusing on key strategies that ensure thorough evaluation of organizational security. You'll dive into vulnerability assessments, learning how to identify potential weaknesses in systems and infrastructure, and how to mitigate risks effectively. As the course progresses, you'll explore the world of penetration testing, understanding the different types of tests such as white-box and black-box testing, and the roles of red, blue, and purple teams in simulating attacks. You’ll also learn about other common security tests used to evaluate an organization’s security posture. The course provides a solid foundation in collecting and analyzing security process data, helping you make informed decisions based on technical and administrative data from your organization. Finally, the course covers the intricacies of conducting security audits, whether internal, external, or third-party. By the end of the course, you will be well-prepared to perform comprehensive security assessments, interpret test results, and implement improvements, ensuring that your organization’s security is robust and up-to-date. This course also prepares you for the CISSP certification exam by covering essential topics related to security testing and assessment. This course is ideal for IT professionals, security testers, and auditors preparing for the CISSP certification or seeking to enhance their skills in security assessment and testing. Basic knowledge of information security and testing methodologies is recommended.