test concepts and procedures for cyber security