Vulnerability Management

The company I’m currently consulting at has a vulnerability management program which is in its infancy. I’ve been told I can input for improvements as needed.

The vulnerability software they use has several options for showing number of vulnerabilities/ severity etc.

The one they currently use shows an over all ‘risk score’ of a device/server and the same for the overall system. This score is calculated to include the severity of vulnerability, number of vulnerabilities, and length of exposure but …

consulting cybersecurity device etc input management options program risk score server severity software the company vulnerabilities vulnerability vulnerability management vulnerability management program