[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-202856-105":59,"doc-detail-202856-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","cbest-intelligence-led-testing-implementation-guide-version-2","CBEST Intelligence-Led Testing - Implementation Guide - Version 2","","CBEST Intelligence-Led Testing Implementation Guide (Version 2.0) provides an updated, accessible framework for running intelligence-led penetration testing assessments for UK financial sector organisations. It outlines the purpose, background, key phases, activities, deliverables, and stakeholder interactions required to increase resilience to cyber attack. The guide explains planning considerations, collaboration and feedback mechanisms, and structured execution through initiation, threat intelligence, penetration testing, assessment, and closure activities, including evaluation and remediation.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/cbest-intelligence-led-testing-implementation-guide-version-2/202856/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/cbest-intelligence-led-testing-implementation-guide-version-2/202856.png","ImageObject",300,407,{"name":92,"@type":93},"Ophelia","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-06","2026-09-04",true,{"@type":102,"interactionType":103,"userInteractionCount":44},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What is the purpose of the CBEST Implementation Guide?","Question",{"text":112,"@type":113},"It explains the key phases, activities, deliverables, and interactions involved in a CBEST assessment for participants and service providers.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"How does CBEST approach penetration testing?",{"text":117,"@type":113},"It promotes an intelligence-led penetration testing approach that mimics cyber attackers targeting an organisation’s Critical Functions and supporting people and technology assets.",{"name":119,"@type":110,"acceptedAnswer":120},"What major phases are covered in the CBEST assessment process?",{"text":121,"@type":113},"The guide structures assessments across Initiation, Threat Intelligence, Penetration Testing, and Closure phases, including planning, validation, assessment, evaluation, remediation, and debrief.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},202856,1788551635,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":44,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":129,"read_time":144},7971461741311,"https://ap-avatar.wpscdn.com/avatar/74000253aff267980c6?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779345379180704826","CBEST Intelligence-Led Testing  \nCBEST Implementation Guide  \nVersion 2.0  \nCopyright notice  \n© 2016 Bank of England  \nThis work is licensed under the Creative Commons Attribution 4.0 International Licence. To view a copy of this licence, visit [http://creativecommons.org/licenses/by/4.0/ or](http://creativecommons.org/licenses/by/4.0/ or) send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA.  \nYou are free to:  \n• Share—copy and redistribute the material in any medium or format.  \n• Adapt—remix, transform and build upon the material for any purpose, even commercially.  \nThe licensor cannot revoke these freedoms as long as you follow the licence terms.  \nUnder the following terms:  \n• Attribution—you must give appropriate credit, provide a link to the licence, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.  \n• No additional restrictions—you may not apply legal terms or technological measures that legally restrict others from doing anything the licence permits.  \nNotices:  \n• You do not have to comply with the licence for elements of the material in the public domain or where your use is permitted by an applicable exception or limitation.  \n• No warranties are given. The licence may not give you all of the permissions necessary for your intended use. For example, other rights such as publicity, privacy or moral rights may limit how you use the material.  \nContents  \nForeword 3  \n\n| 1\u003Cbr>1.1\u003Cbr>1.2\u003Cbr>1.3\u003Cbr>1.4\u003Cbr>1.5 | Introduction\u003Cbr>Purpose of this guide\u003Cbr>Background\u003Cbr>Structure of this document\u003Cbr>Terms used in this document\u003Cbr>Legal disclaimer | 4 4\u003Cbr>4 5\u003Cbr>5 5 |\n| --- | --- | --- |\n| 2\u003Cbr>2.1\u003Cbr>2.2\u003Cbr>2.3\u003Cbr>2.4\u003Cbr>2.5\u003Cbr>2.6\u003Cbr>2.7 | CBEST overview\u003Cbr>Introduction\u003Cbr>Stakeholders and information flow Project management\u003Cbr>Risk management Process overview Planning considerations Collaboration and feedback | 6 6\u003Cbr>6 6\u003Cbr>7 8\u003Cbr>9\u003Cbr>10 |\n| 3 | Initiation Phase | 11 |\n| 3.1 | Overview | 11 |\n| 3.2 | Launch | 11 |\n| 3.3\u003Cbr>3.4 | Engagement Scoping | 11\u003Cbr>12 |\n| 3.5 | Procurement | 13 |\n| 4\u003Cbr>4.1\u003Cbr>4.2\u003Cbr>4.3\u003Cbr>4.4 | Threat Intelligence Phase\u003Cbr>Overview\u003Cbr>Direction\u003Cbr>Intelligence\u003Cbr>Validation | 14\u003Cbr>14\u003Cbr>15\u003Cbr>16\u003Cbr>19 |\n| 4.5 | Assessment | 20 |\n| 5\u003Cbr>5.1\u003Cbr>5.2\u003Cbr>5.3\u003Cbr>5.4 | Penetration Testing Phase\u003Cbr>Overview\u003Cbr>Planning\u003Cbr>Execution\u003Cbr>Review | 22\u003Cbr>22\u003Cbr>22\u003Cbr>23\u003Cbr>24 |\n| 5.5 | Assessment | 25 |\n\n6 Closure Phase 27  \n6.1 Overview 27  \n6.2 Evaluation 27  \n6.3 Remediation 27  \n6.4 Debrief 28  \n6.5 Supervision 28  \n2 CBEST Intelligence-Led Testing CBEST Implementation Guide  \nForeword  \nCBEST is now widely considered as a world-leading framework for intelligence-led penetration testing of systemically critical organisations who stand to benefit from its pioneering and trusted approach.  \nThis updated CBEST Implementation Guide, produced by the Bank of England Sector Cyber Team (SCT), is for the benefit of CBEST participants and service providers. It explains the key phases, activities and deliverables involved in a CBEST assessment.  \nLike all projects, CBEST involves several organisations working together through both contractual arrangements and the spirit of partnership to achieve the objective of increasing the UK Financial Sector’s resilience to cyber attack.  \nThis latest version of the CBEST Implementation Guide represents an evolution of the previous framework. The underlying approach remains the same but by incorporating comments from CBEST participants and service providers this Guide aims to be more accessible and better able to accommodate specific organisational and sector needs.  \nCBEST is set to grow and evolve like the cyber attackers it seeks to counter. It is a vital framework for any organisation or sector seeking to stay resilient to cyber attack.  \nBuck Rogers  \nDeputy Chief Information Security Officer Bank of England  \n1 Introduct","cbCaiuvWRehqnbGY","https://ap.wps.com/l/cbCaiuvWRehqnbGY","pdf",1964851,31,"English","# Foreword\n# Introduction\n## Purpose of this guide\n## Background\n## Structure of this document\n## Terms used in this document\n## Legal disclaimer\n# CBEST overview\n## Stakeholders and information flow\n## Project management\n## Risk management\n## Process overview\n## Planning considerations\n## Collaboration and feedback\n# Initiation Phase\n## Overview\n## Launch\n## Engagement Scoping\n## Procurement\n# Threat Intelligence Phase\n## Overview\n## Direction\n## Intelligence\n## Validation\n## Assessment\n# Penetration Testing Phase\n## Overview\n## Planning\n## Execution\n## Review\n## Assessment\n# Closure Phase\n## Overview\n## Evaluation\n## Remediation\n## Debrief\n## Supervision","[{\"question\":\"What is the purpose of the CBEST Implementation Guide?\",\"answer\":\"It explains the key phases, activities, deliverables, and interactions involved in a CBEST assessment for participants and service providers.\"},{\"question\":\"How does CBEST approach penetration testing?\",\"answer\":\"It promotes an intelligence-led penetration testing approach that mimics cyber attackers targeting an organisation’s Critical Functions and supporting people and technology assets.\"},{\"question\":\"What major phases are covered in the CBEST assessment process?\",\"answer\":\"The guide structures assessments across Initiation, Threat Intelligence, Penetration Testing, and Closure phases, including planning, validation, assessment, evaluation, remediation, and debrief.\"}]","CBEST Intelligence-Led Testing - Implementation Guide - Version 2 | PDF",78]