Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_14

14. Vulnerability Management Development

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

A well-planned vulnerability management program that aligns with the overall organization’s risk management program can assist in this process by reducing the overall attack surface by:

1. 1.

   Identifying and prioritizing assets across the organization;

    
2. 2.

   Identifying the vulnerabilities that can be exploited by attackers;

    
3. 3.

   Prioritizing vulnerabilities by their potential impact on the business;

    
4. 4.

   Communicating the associated risk to key business owners, executives, and auditors;

    
5. 5.

   Measuring the effectiveness ...