Effective Vulnerability Management

Acknowledgments

We would like to acknowledge and thank the broad vulnerability management and cybersecurity community who have contributed to the many resources, methodologies, and programs we cite throughout this text. Organizations and volunteers such as FIRST for their work on CVSS and EPSS to those individuals helping maintain major programs such as the NIST NVD, often unseen to the broad public leveraging their work. We also want to thank industry innovators, leading the charge with products and thought leadership around modernizing vulnerability management and the federal and commercial leaders calling publicly for a pivot to secure-by-design/default systems, software, and products. Without the broader community, we could never have produced such a work. We would also like to thank our Foreword author Ron Gula and our technical editor Karen Scarfone for their contributions to this publication.