The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services

Chapter 9

Vulnerability Management

Cobra Kai is about strength. If you’re not strong on the inside, you can’t be strong on the outside.

—Sensei Johnny Lawrence

The focus of this chapter is managing vulnerabilities. As covered in Chapter 1, “Introducing Security Operations and the SOC,” one of the key services found in successful SOCs around the world is vulnerability management, which is the service responsible for reducing the organization’s risk by addressing identified vulnerabilities. The quality of this service impacts how the SOC functions. Cyberattacks target vulnerabilities with the goal of delivering malware through them. If there is not a vulnerability to exploit, the attack cannot happen. The more vulnerabilities that exist in the ...