238 Vulnerability ManageMent
this information that will provide ongoing performance monitoring
enabling each user to identify deficiencies and address them. In this
section, we will discuss two types of reports: (1) basic reporting that
shows trends in vulnerability processes and (2) advanced reports that
can help identify sources of interference with normal organizational
behavior.
7.7.1 Basic Reports
Define the VM process or perhaps more specifically the remediation
process. You should already have done this if you have gotten this far
in this book. Figure 7.9 shows an abbreviated process with key func-
tional areas. e shaded items are data elements that flow into and out
of the steps.
Determine the inputs and outputs from that process for each ...