Nestlé Unified Vulnerability Management Approach
summary
Nestlé builds a Brinka‑based platform that ingests vendor advisories, scanner feeds, pen tests and asset inventories, auto‑bundles fixes to each team’s patching calendar, and links scanner hits to those advisory tickets — cutting scanner noise by about 80% volume reduction. A separate pipeline elevates enriched “burning CVs” (CVSS vectors, threat intel, countermeasure hits, live exploit telemetry) for same‑day escalation and SLA tracking; remaining challenges are inventory quality, management buy‑in and platform customizations at global scale.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 3:26Unified approach overview
- 10:08Threat and criticality analysis
- 22:25Asset management and ownership
- 25:03Offensive security integration
- 31:36Summary of achievements
- 35:09Q&A: Challenges and priorities
- 38:24Q&A: Technical deep dives
- 50:20Q&A: Metrics and closing
related talks
31mEfficient Vulnerability Management in Hierarchical Supply Chains
40mManaging Risk Across the Vulnerability Ecosystem
59mWho’s Vulnerability Is It Anyway? Harmonizing Stakeholder Roles in Vulnerability Management
33mVulnerability Management Lifecycle in DevSecOps
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
27mEffective Vulnerability Management for a DevSecOps Pipeline
51mPractical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities- 43mThe Art of Vulnerability Management - Practical Application of Cyber Triage