36 - Planning
37 - Fieldwork
38 - Testing Technical Controls
39 - Identity Access Management IAM
40 - Password Configuration Testing
41 - Access Provisioning Testing
42 - Access Deprovisioning Testing
43 - Privileged User Access Testing
44 - Segregation of Duties SOD Testing
45 - Data Integrity Testing
46 - Vulnerability Assessment Testing
47 - Patch Management Testing
48 - Firewalls Intrusion Detection Testing
49 - Endpoint Testing
50 - Network Testing
51 - Business Continuity Plan Testing
52 - Change Management Testing
53 - Incident Management Testing
54 - Operational Controls
55 - Policies Procedures Testing
56 - Risk Assessment Management Testing
57 - Security Awareness Training Testing
58 - Vendor Management Testing
59 - Physical Access Testing
60 - Reporting Phase
61 - Cybersecurity Audit Testing Outcomes
62 - Reporting Test Results
63 - Reporting Control Deficiency
64 - FollowUp Phase
