I am currently developing a Security testing policy for my department and was wondering if there is an ANSI standard to provide guidence.
Any help appreiciated.
Have you looked?
Search "security" to start.
Also, a quick Google will show lots of returns on security testing. Go forth and conquer!
Resistance is futile.