Building a Vulnerability Management Program: How to Eat an Elephant
summary
Describes how to build an effective vulnerability management program by addressing common people and technology problems and prioritizing actions to reduce risk efficiently. Focuses on practical approaches for avoiding and mitigating pitfalls and maximizing return on effort in vulnerability reduction.
AI-written summary · about
chapters (13)
- 0:00Start
- 1:59Why do I need a vulnerability management program?
- 4:26How do you build a program from scratch?
- 7:50Red Flags
- 11:25Example Requirements Matrix
- 12:32Plan Your Deployment
- 13:59Credential Management
- 17:23Discover
- 23:16Double check your scan results!
- 26:46Top Priorities
- 28:52Prioritizing Based on Cost and Risk
- 31:22Prioritizing Based on the Threat
- 32:40Remediate
related talks
27mEffective Vulnerability Management for a DevSecOps Pipeline
46mVulnerability Management at Scale
59mWho’s Vulnerability Is It Anyway? Harmonizing Stakeholder Roles in Vulnerability Management
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate- 43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
32mIs Vulnerability Management Dead? A Security Architect’s...
33mVulnerability Management Lifecycle in DevSecOps