IT Security Risk Control Management: An Audit Preparation Plan

© Raymond Pompon 2016

Raymond Pompon, IT Security Risk Control Management, 10.1007/978-1-4842-2140-2_14

14. Vulnerability Management

Raymond Pompon¹ 

(1)Seattle, Washington, USA

Another flaw in the human character is that everyone wants to build and nobody wants to do maintenance.

—Kurt Vonnegut, Hocus Pocus

Most of the time, you shouldn’t work too hard at being exceptional. You’re better off first making sure that you avoid doing anything too stupid. If you are hacked because of some unpatched hole that’s been sitting around for months, you will look stupid. Where did that hole come from? We know that no matter how secure we make our systems, new vulnerabilities will be found. Your challenge is to find and fix the holes before the attackers exploit ...