Vulnerability Management Process
Channel: Information Security Cyber Security
Date: 11/09/2022

Vulnerability Management Process:
Vulnerability management is a continuous, proactive, and often automated process of identifying, assessing, and addressing potential security weaknesses
Discover - The first process involves taking an inventory of all assets across the environment, identifying details including operating system, services, applications, and configurations to identify vulnerabilities. 
Prioritize - Second, discovered assets need to be categorized into groups and assigned a risk-based prioritization based on criticality to the organization.
Asses - Third is establishing a risk baseline for your point of reference as vulnerabilities are remediated and risk is eliminated. Assessments provide an ongoing baseline over time.
Remediate - Fourth, based on risk prioritization, vulnerabilities should be fixed (whether via patching or reconfiguration). Controls should be in place so that that remediation is completed successfully and progress can be documented.
Verify - Fifth, validation of remediation is accomplished through additional scans and/or IT reporting.
Report - IT needs tactical reporting on vulnerabilities identified and remediated (by comparing the most recent scan with the previous one), executives need a summary of the current state of vulnerability