SSCP - Risk Identification, Monitoring and Analysis - Security testing