NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)
Target Identification

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) NISTSP115-3: Target Identification and Analysis - Network Discovery, Port and Service ID, Vuln Scanning

Apply Section 4 target identification and analysis techniques: network discovery using passive (DNS lookups + interrogation of databases + WHOIS + internet-exposure search services) + active (port scans + ping sweeps + ICMP + traceroute) + network port and service identification (TCP/UDP scanning + service version detection + banner grabbing) + vulnerability scanning (authenticated and unauthenticated) + wireless scanning (rogue AP detection + signal strength mapping + war driving for authorised assessments).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 41 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 30111:2019 · 3 controls

  • 30111-1 Scope
  • 30111-3 Terms and definitions
  • 30111-8.1 Post-release monitoring

ISO/IEC 29147:2018 · 2 controls

  • 29147-5.6 Advisory Content and Quality
  • 29147-7.8 Remediation information

PTES · 2 controls

  • PTES-3.1 Keep intelligence gathering within scope and the rules of engagement
  • PTES-3.3 Scope vulnerability analysis to the agreed depth and breadth

BSI IT-Grundschutz · 1 control

  • BSI-14 Vulnerability scanning and management

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 1 control

  • CPG-5.A Vulnerability Disclosure Program

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

  • CAT-D3-3 Corrective controls

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

  • FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g))

ISO/IEC 27011:2024 · 1 control

  • 27011-8.5 Vulnerability and malware management

ISO/IEC 27043:2015 · 1 control

  • ISO27043-25 Technical vulnerability management

ISO/IEC 29134:2023 · 1 control

  • 29134-9.2 Report findings and recommendations

ISO/SAE 21434 · 1 control

  • ISO21434-25 Technical vulnerability management

Kuwait National Cybersecurity Framework · 1 control

NIST Privacy Framework · 1 control

  • NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

New Zealand Information Security Manual (NZISM) · 1 control

  • NZISM-5 Network Security, System Hardening, and Application Security

OWASP ASVS · 1 control

OWASP DevSecOps Maturity Model (DSOMM) · 1 control

  • DSOMM-1 Culture, Organization, Education, and Governance

OWASP MASVS · 1 control

  • OWASPMASVS-6 MASVS-CODE: Code Quality, Build Settings, and Updates

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

  • IM8-SEC.4 Vulnerability Management

South Korea ISMS-P · 1 control

  • ISMSP-SYS-04 Vulnerability Management

UN Guiding Principles on Business and Human Rights (UNGPs) · 1 control

  • UNGPBHR-2 Pillar II: Corporate Responsibility to Respect Human Rights

US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 41 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) controls