Testing cyber security

Answer:

The most effective and reliable tests of cybersecurity controls, plans and strategy will require software and other resources (these are called vulnerability assessment and penetration test).

However, you also may rely on documentation analysis and tabletop simulations to verify some aspects of your cybersecurity, but these cover far less of the scope you may be exposed to.
These articles will provide you further explanation about security tests:
- How to use penetration testing for ISO 27001 A.12.6.1 https://advisera.com/27001academy/blog/2016/01/18/how-to-use-penetration-testing-for-iso-27001-a-12-6-1/
- How to set security requirements and test systems according to ISO 27001 https://advisera.com/27001academy/blog/2016/01/11/how-to-set-security-requirements-and-test-systems-according-to-iso-27001/
- ISO 27 001 vs. ISO 27032 cybersecurity standard https://advisera.com/27001academy/blog/2015/08/25/iso-27001-vs-iso-27032-cybersecurity-standard/