Software Certifications ~ Common Body of Knowledge (CMST)

Certifications

Quality

Certified Associate in Software Quality (CASQ) Certified Software Quality Analyst (CSQA) Certified Manager of Software Quality (CMSQ)

Testing

Certified Associate in Software Testing (CAST) Certified Software Tester (CSTE) Certified Manager of Software Testing (CMST)

Project Management

Certified Software Project Manager (CSPM)

Business Analysis

Certified Associate Business Analyst (CABA) Certified Software Business Analyst (CSBA)

Process Engineering

Certified Software Process Engineer (CSPE) Certified Quantitative Software Process Engineer (CQSPE)

Read the latest survey report on "Getting Certified"

Common Body of Knowledge: (CMST)

	CMST Brochure

All candidates will be tested on the current CMST CBOK / Skill Categories mentioned below. Those who are already a CMST certificant and plan to recertify will either be tested (recertification examination) or need to start obtaining CPE credits towards recertification (journal) based off this current version of the CBOK.

Skill Categories: (CMST)
Software Testing Principles and Concepts Building the Test Environment Managing the Test Project Test Planning Executing the Test Plan Test Status, Analysis and Reporting User Acceptance Testing Testing Software Developed by Outside Organizations Testing Software Controls and the Adequacy of Security Procedures Testing New Technologies
Back to Certified Manager of Software Testing: (CMST)


Knowledge Skill Category 9: Testing Software Controls and the Adequacy of Security Procedures
The software system of internal control includes the totality of the means developed to ensure the integrity of the software system and the products created by the software. Controls are employed to control the processing components of software, assure that software processing is in accordance with the organization's policies and procedures, and according to applicable laws and regulations. Software systems are divided into two parts, the part that performs the processing and the part that controls processing. The control part includes a system of controls as well as the means employed to assure processing cannot be penetrated by outside sources. This category addresses all the components of the software system of internal control and security procedures. *Principles and Concepts of a Software System of Internal Control and Security*
Vocabulary of Internal Control and Security – the vocabulary of internal control and security which includes terms such as risk, threat, control, exposure, vulnerability and penetration. Internal Control and Security Models – includes internal control and security models. The current model that is most accepted is the COSO model. (Committee of Sponsoring Organizations, COSO, is comprised of five major U.S. accounting associations.)
*Testing the System of Internal Controls* The test process for testing the system of internal controls in software is:
Perform risk analysis – determine the risks faced by the transactions/events processed by the software. Determine the controls for each of the processing segments for transactions processing including: transaction origination transaction entry transaction processing data base control transaction results Determine whether the identified controls are adequate to reduce the risks to an acceptable level. When all components of the control system are present and functioning effectively, the internal control process can be deemed “effective.”
*Testing the Adequacy of Security for a Software System* Testers need to evaluate the security for an individual software system. The tests should include:
Evaluate the adequacy of management’s security environment. Security Risk Assessment – determining the types of risk requiring security controls. Identify the most probable points where the software would be penetrated. Determine the controls at those points of penetration. Test/assess whether those controls are adequate to reduce the security risks to an acceptable level. These tests should include: Security awareness of the software stakeholders Adequacy of management’s security environment.
Back to Certified Manager of Software Testing: (CMST)

Submit a Query

*Name:

*Organization:

*Phone:

*Email:

*Exam Date:

*Urgent: Call:

Yes No

*Country:

*Query:

* Required Fields

QAI Web-based Business Analysis Certification Prep Courses

Fast Facts

	40000+ IT Professionals certified worldwide
	135 countries, 6 continents and 3000 + Test Centers
	4000 + certified at TCS
	4400 + certified at Infosys
	2100 + certified at Accenture
	First certification initiated in 1985 by QAI, USA
	First formal examination process was launched in 1990

Quick Links

CSTE Group

CSQA Group

CSQA Info