Vulnerability Management

Hygiene · Intermediate

The repeating process of finding weaknesses, prioritizing them, fixing or accepting them, and checking that the fix worked.

A scan is one step. Management is the whole loop, including the decision that a low-risk item can wait and the proof that a critical item is gone.

Example: Each month the team scans, patches critical items within seven days, and rescans to confirm the finding closed.

Common misconception

Running a scanner once a year is not this process. The process includes ownership and verification.