How do you guys deal with vulnerability management related GPOs?

I recently took on a role at my company (internally promoted) to work on vulnerability management. We used to use a really bad vulnerability management platform but recently moved over to Rapid7's InsightVM which is showing us a ton more information. Going through our list of vulnerabilities, a decent amount of them require policy edits or registry edits done through Group Policy.

Curious how you all deal with these, whether grouping them into the default domain policy, having a separate …

cybersecurity deal management vulnerability vulnerability management