#1381 CORE PENT TEST overlaps to not draw sufficient differences between skill sets change request accepted

Testing, Penetration Testing and Conformance Review skills have overlaps e.g.

Level 6
CORE 6 review of implementation and use of standards and the effectiveness of operational and process controls
PENT 6 seeking vulnerabilities across the full spectrum of organisation policies, processes

Level 5
TEST 5 Defines and communicates the test strategy. Manages all test processes, including test plans, resources, costs, timescales, test deliverables and traceability.
PENT 5 Defines and communicates the test strategy. Manages all test processes, and contributes to corporate security testing standards.

The guidance notes for CORE ( "Conformance reviews can be applied in a number of areas such as - but not limited to - asset management, network security tools, firewalls and internet security, sustainability, real-time systems, application design and specific certifications. ") sound like the activities of PENT.

All three activities include test management.  Is consolidation appropriate?

Current status of this request: accepted

What we decided

This change request has been reviewed alongside other SFIA skills in the area of testing, quality assurance, conformance, audit. 

What we changed

PENT is restructured and descriptions improved to make some clearer distinctions. 

CORE has been retired, Quality assurance (QUAS) has been restructured and Audit (AUDT) has been added.