Practical Vulnerability Management

5DEALING WITH VULNERABILITIES

All the data collection and analysis you do will be for nothing if you don’t have a clear goal in mind for how you’ll use the results. In this chapter, you’ll learn to use your vulnerability analysis to improve your organization’s baseline security level. We’ll look at three broad categories of security measures: patching, mitigation, and systemic measures. Patches and mitigations are direct responses and are almost always the most pressing. But the lasting value in any security program is systemic change brought about by improved intelligence. Although it might seem counterintuitive, another option is to accept the ...