Information Security Handbook

Vulnerability management

It is very important to note that many of the things that cause an all-hands-on-deck situation relate to how an enterprise information system is managed. If an enterprise information system is not regularly patched, then this leads to an all-hands-on-deck situation.

Vulnerability management is the process of:

• Identifying vulnerabilities that are applicable to your information system:
  • Vulnerabilities can be identified through the use of enterprise vulnerability management tools such as Nessus
  • Additionally, the information security professional should be reading information security blogs and should be subscribed to the security sites for the vendors that they use
• Triaging vulnerabilities that are applicable to ...