Learn the basics of vulnerability management. Discover why vulnerabilities exist, as well as how to manage them from start to finish.
Overview
Syllabus
Introduction
- Managing vulnerabilities
- The key elements of vulnerability management: DARC
- What is a vulnerability?
- Why do vulnerabilities exist?
- Vulnerability sources
- Introduction to vulnerability scanning
- Reporting
- Handling all those vulnerabilities
- CVSS: Industry standard risk algorithm
- Concern: Regulatory requirements
- Concern: Exposure
- Risk and compensating controls
- Intro to patch/config management tools
- Vetting false positives
- Confirming remediation
- Reviewing DARC
- Building a program
- Next steps
Taught by
Lora Vaughn
