Skip to content
AfriScienceGroup home
Cybersecurity and IT

Vulnerability Management and Penetration Testing

Scanning produces thousands of findings, patching capacity is finite, and the gap between those two facts is where vulnerability management actually happens. This course covers closing it sensibly. Delegates work through asset discovery, because you cannot scan what you do not know about, scanning technique and the difference between authenticated and unauthenticated results, and the prioritisation that accounts for exploitability and exposure rather than severity score alone. Remediation, compensating controls and exception handling follow. Penetration testing is covered from the client side: scoping, rules of engagement, reading a report and telling a real finding from a scanner result. The course closes on measuring the programme and on disclosure handling.

5 day course

Course objectives

  • Discover and maintain an accurate asset inventory
  • Run authenticated and unauthenticated scans and interpret the difference
  • Prioritise by exploitability and exposure rather than score alone
  • Manage remediation, compensating controls and exceptions
  • Scope a penetration test and set rules of engagement
  • Read a test report and distinguish real findings from scanner output
  • Measure the programme and handle external disclosure

Who should attend

  • Security analysts and vulnerability managers
  • IT administrators responsible for patching
  • Security managers commissioning penetration tests
  • Internal auditors reviewing technical controls
  • Application and infrastructure owners

Course outline

  1. 01Thousands of findings, finite capacity
  2. 02Asset discovery and inventory
  3. 03Scanning technique and authentication
  4. 04Prioritisation by exploitability and exposure
  5. 05Remediation and compensating controls
  6. 06Exception handling and risk acceptance
  7. 07Commissioning and scoping a penetration test
  8. 08Reading reports, measurement and disclosure

Scheduled sessions

Scheduled sessions for Vulnerability Management and Penetration Testing
DatesVenueFormatPriceRegister
21 to 25 December 2026OnlineOnlineR8,500 per delegate
28 December 2026 to 1 January 2027Cape Town, South AfricaClassroomR19,950 per delegate
4 to 8 January 2027Johannesburg, South AfricaClassroomR19,950 per delegate
1 to 5 March 2027Accra, GhanaClassroomUSD 1,325 per delegate
8 to 12 March 2027Pretoria, South AfricaClassroomR19,950 per delegate

Vulnerability Management and Penetration Testing

From R8,500

Ask