Speaker: Christophe Németh

No one would buy car insurance that only covers one headlight, against one type of accident, for one week of the year. Yet many organizations approach security testing in exactly this way: one application, one testing method, once a year. When the board asks, “Are we covered?”, the answer is often a list of findings rather than a clear picture of actual security coverage.

Christophe Németh introduces four essential dimensions of security testing coverage: Surface (what is tested), Temporal (how recently), Scenario (against which threats), and Depth (how thoroughly).

Using a real-world example, he reveals how critical gaps hide behind clean testing reports, why no single testing method provides complet ...