Vulnerability management is the process that identifies, prioritizes and mitigates against malicious actors seeking to exploit internal weaknesses in an organization’s network or system. It is a subset of attack surface management, as it addresses weaknesses that have already been discovered within your IT infrastructure and seeks to mitigate them. It is an important approach to defending against current risks to your organization.