Security Risk Management

Chapter 11

Threat and Vulnerability Management

Information in this Chapter

• Building Blocks

• Threat Identification

• An Efficient Workflow

• The FAIR Approach

Introduction

If you are looking for an opportunity to apply the risk principles and techniques that we have introduced thus far into daily security activities, then the Threat and Vulnerability Management program is a great place to start. This is a basic function that every organization needs to have, so it makes a good candidate for a forum in which to roll out your revised risk model. Even a task as common as patch management can greatly benefit from a good dose of risk management.

Building Blocks

If you think about the typical tasks for which an Information Security team is responsible, ...