SANS Whitepaper – Building a Vulnerability Management Program – A Project Management Approach

SANS Whitepaper – A Practical Methodology for Implementing a Patch Management Process

NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Technologies

Open Web Application Security Project (OWASP) – Testing Tools

Open Web Application Security Project (OWASP) – Free for Open Source Application Security Tools

Open Web Application Security Project (OWASP) – Testing Guide v4

FedRAMP – Penetration Test Guidance

The Penetration Testing Execution Standard

ISACA Journal – Planning for Information Security Testing – A Practical Approach

SANS Offensive Operations Training and Resources