An IT privacy practitioner wants to test an application in pre-production that will be processing...

The best testing method to identify and review the application’s runtime modules is dynamic application security testing (DAST). DAST is a testing technique that analyzes the application’s behavior and functionality during its execution. DAST can detect security and privacy vulnerabilities that are not visible in the source code, such as injection attacks, cross-site scripting, broken authentication, sensitive data exposure, or improper error handling. DAST can also simulate real-world attacks and test the application’s response and resilience. DAST can provide a comprehensive and realistic assessment of the application’s security and privacy posture in the pre-production environment. References:

[ISACA Glossary of Terms]

[OWASP Top 10 Web Application Security Risks]

[ISACA CDPSE Review Manual, Chapter 2, Section 2.4.2]

[ISACA Journal, Volume 6, 2018, “Dynamic Application Security Testing”]